Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://jaz.wxk.mybluehost.me/ch/104c5

Overview

General Information

Sample URL:	http://jaz.wxk.mybluehost.me/ch/104c5
Analysis ID:	1444847
Infos:

Detection

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Executes massive DNS lookups (> 100)

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 1364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=1564,i,17994336064599904773,4391651044741737396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://jaz.wxk.mybluehost.me/ch/104c5" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://jaz.wxk.mybluehost.me/ch/104c5	Avira URL Cloud: detection malicious, Label: phishing
Source: http://jaz.wxk.mybluehost.me/ch/104c5	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: http://jaz.wxk.mybluehost.me/ch/104c5/css/sso.min-20200819.css

Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: http://jaz.wxk.mybluehost.me/ch/104c5

Virustotal: Detection: 14%

Phishing

AI detected phishing page

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

LLM: Score: 9 brands: SwissPass Reasons: The URL 'http://jaz.wxk.mybluehost.me/ch/104c5/' does not match the legitimate domain for SwissPass, which should be something like 'swisspass.ch'. The use of a subdomain on 'mybluehost.me' is highly suspicious and often used in phishing attacks. The page contains a login form, which is a common target for phishing. The overall design mimics the legitimate SwissPass branding, which is a social engineering technique to deceive users. DOM: 0.0.pages.csv

Phishing site detected (based on favicon image match)

Source: http://mybluehost.me	Matcher: Template: swisspass matched with high similarity
Source: http://jaz.wxk.mybluehost.me/ch/104c5/	Matcher: Template: swisspass matched with high similarity

Phishing site detected (based on image similarity)

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

Matcher: Found strong image similarity, brand: SWISSPASS

Phishing site detected (based on logo match)

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

Matcher: Template: swisspass matched

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

HTTP Parser: Number of links: 0

Source: https://custommapposter.com/

HTTP Parser: Total embedded image size: 10944

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

HTTP Parser: Title: Login | SwissPass does not match URL

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

HTTP Parser: Has password / email / username input fields

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

HTTP Parser: Form action: ./send1.php

Source: http://jaz.wxk.mybluehost.me/ch/104c5/

HTTP Parser: <input type="password" .../> found

Source: https://custommapposter.com/article/top/926	HTTP Parser: No favicon
Source: https://custommapposter.com/article/top/926	HTTP Parser: No favicon
Source: https://custommapposter.com/article/top/926	HTTP Parser: No favicon
Source: https://custommapposter.com/article/top/926	HTTP Parser: No favicon
Source: https://custommapposter.com/article/top/926	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://app.grow.me/iframe-login?siteId=U2l0ZTo3NTI4MzhlYS05MGI4LTRiMGMtYTQyNC0wNzI3YWJiMGIyMGI%3D&callback=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156972	HTTP Parser: No favicon
Source: https://cs.seedtag.com/cs.html?pt=5261-2296-01&pc=US	HTTP Parser: No favicon
Source: https://www.swisspass.ch//pw-reset?lang=de&provider=sbbkn&callback=oevloginhttps://www.swisspass.ch//register?lang=de&provider=sbbkn&callback=oevlogin	HTTP Parser: No favicon
Source: https://www.swisspass.ch//pw-reset?lang=de&provider=sbbkn&callback=oevloginhttps://www.swisspass.ch//register?lang=de&provider=sbbkn&callback=oevlogin	HTTP Parser: No favicon
Source: https://ssbsync.smartadserver.com/api/sync?callerId=22&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=6403784576581203868&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html	HTTP Parser: No favicon
Source: https://visitor.omnitagjs.com/visitor/isync?uid=513c4e190506981c315d38ccadf488f2&name=SEEDTAG&visitor=&gdpr=0&gdpr_consent_string=&us_privacy=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157743&gdpr=0&gdpr_consent=&us_privacy=&predirect=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fpubmatic%3Fchanneluid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157743&gdpr=0&gdpr_consent=&us_privacy=&predirect=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fpubmatic%3Fchanneluid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157743&gdpr=0&gdpr_consent=&us_privacy=&predirect=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fpubmatic%3Fchanneluid%3D	HTTP Parser: No favicon
Source: https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0580edc5dbac4778bfc19398f495dfb8	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5140084931246551630	HTTP Parser: No favicon
Source: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://c1.adform.net/serving/cookie/match?CC=1&party=14&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://resources.infolinks.com/static/container-4.0.html	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=tk2EoAPtRYYTTaXUhTWRTahX&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://router.infolinks.com/usync/manage?pid=3245929&wsid=0&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003	HTTP Parser: No favicon
Source: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?pubId=598ce3ddaee8c90	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49740 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.74.236.223:443 -> 192.168.2.9:50316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.117:443 -> 192.168.2.9:50301 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.244:443 -> 192.168.2.9:50412 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.50.141:443 -> 192.168.2.9:50547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.42.247:443 -> 192.168.2.9:50801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.251.30.134:443 -> 192.168.2.9:50995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.46:443 -> 192.168.2.9:51119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.82:443 -> 192.168.2.9:51239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.171.119.95:443 -> 192.168.2.9:51316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.80.73.249:443 -> 192.168.2.9:51448 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.67.179.153:443 -> 192.168.2.9:51512 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.149.91:443 -> 192.168.2.9:52104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.117:443 -> 192.168.2.9:52263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.122:443 -> 192.168.2.9:52531 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 10

Source: global traffic	TCP traffic: 192.168.2.9:52685 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.9:50673 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.9:50278 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: corporatedefenseetl.com to https://custommapposter.com/article/top/926

Source: global traffic

DNS traffic detected: number of DNS queries: 255

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49740 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 21 May 2024 09:21:11 GMTServer: nginx/1.21.6Content-Type: text/htmlContent-Length: 14645Last-Modified: Mon, 20 May 2024 19:35:18 GMTCache-Control: max-age=7200Expires: Tue, 21 May 2024 09:40:05 GMTVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2X-Server-Cache: trueX-Proxy-Cache: HITAccept-Ranges: bytesData Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 72 d9 76 dc 46 b2 ed f3 f5 5a fe 87 74 c9 36 c9 36 b3 26 0e 92 4a a4 ba 35 da 74 8b 92 6c 49 76 db 3e be 5c 09 64 00 48 56 22 13 ce 4c d4 40 5b 7f 73 be e1 3c f9 cd 3f 76 03 a8 81 35 24 8a ac 22 a5 ee b3 2e ca 16 81 88 1d 11 3b 76 ec a3 cf 9e be 7a f2 f6 a7 d7 cf 48 e2 52 f9 f0 d3 4f 8e 8a bf 24 94 cc da e3 da b9 25 4a 53 a7 f3 30 21 09 b3 49 98 30 15 03 49 84 75 da 0c 49 68 ad 33 4c d9 48 9b d4 ce 7f ed f1 e9 b7 70 42 2b 4b 6c 2f 26 42 49 a1 a0 78 c3 ff 43 29 b2 8c b9 c4 92 4c b2 10 12 2d 39 18 92 6a fc 57 d5 08 17 e6 b8 26 9d a9 11 89 33 8f 6b 1c 68 98 d4 88 75 43 09 c7 b5 1a 32 25 f8 1c 25 c0 f8 f8 bd fc 4e c1 31 5c c5 65 14 7e cb 45 ef b8 f6 44 2b 07 ca d1 b7 c3 0c 6a 24 1c 7d 1d d7 1c 0c 5c a3 58 f5 01 c1 a5 8c 05 77 fc ee ed 73 7a af 36 db cc 09 27 e1 e1 0b 1d 0b 45 fe 20 6f fa c2 da d7 a8 cb 51 63 94 58 1c 3b 6d 7e f2 ec 18 78 0c bb d8 da e8 14 8e 5b b5 39 4a ff a2 ef 1e d1 27 3a c5 e5 45 20 a1 56 dd 08 c5 0f 59 98 60 27 7c 2b 34 c7 b7 34 b7 8e 1a e8 31 29 38 73 30 df fa 49 81 a6 c5 ce 46 cb 6b 34 9e af 7e 6d 58 9c b2 15 65 cd 79 fc b3 41 26 0c d8 15 05 7d c1 5d 72 cc a1 27 42 a0 e5 c7 2e 9a 00 1d c1 24 b5 21 c3 53 b6 ea 4d dc 89 0d 44 9a a7 97 a1 1a 51 0c 85 ab f5 04 f4 33 6d dc 8a 11 1c 26 e0 71 88 16 86 c9 59 bc 4a d8 a7 e8 b4 e9 3d 09 da 99 14 de 7b 13 26 f2 af 3f ad 05 49 a2 bf fe 34 e4 24 31 40 4e 75 20 a4 70 7f fd b7 eb 90 e7 12 06 22 00 b9 4b 72 c5 82 e4 af ff 56 b1 88 f1 9d 93 9e 96 12 3b fc 80 5c 41 48 a8 4f 38 71 b0 a1 11 99 13 5a ad a0 23 0b 8b ed 5e 32 da 25 2c d0 e5 3f 4a 41 8a 90 5d 12 b3 5d 92 30 19 38 36 d8 25 01 4b 10 7e 91 c7 bb e4 af ff 89 22 50 52 e0 31 0d e9 81 e9 42 62 76 2f 5f fe fa 9f de 84 4a 17 86 7d 6d f8 aa 73 bd 79 fc 98 3c 79 fe 9c 3c 7f fe 66 52 c5 72 97 68 b3 5e 4d 96 07 52 58 24 b4 5e 59 a8 b3 a1 11 71 b2 ea da de b2 34 63 6a b8 a2 e8 45 21 2f f9 e3 52 df 29 51 74 09 75 3a 13 e1 8a ea 36 e1 6c 38 2d 31 e8 65 2b 1c 65 91 5b b9 9f 50 1c 06 d3 22 1d 68 b7 4a 78 0f c3 cc e8 0c 8c 1b 1e d7 74 dc 71 c2 c9 7f b3 9f e7 f8 5c cf d6 89 73 99 ed 34 1a fd 7e bf 6e 0b 76 19 b2 ab 87 49 a3 61 c0 ea dc 84 60 1b 22 8d 1b 3a 3e 13 29 9e a2 7e 9e c5 0b 83 ca f8 8a 11 b3 6d 17 4a f1 4a 70 56 e8 bf a2 bc 0f 41 01 5b 54 7b 98 ad 2a aa 5c 4b 43 4f 16 87 6c 94 ff 2e 34 cd 8d 9c eb 29 85 ea 12 3c 48 74 5c ab 97 2a 44 ac 27 70 46 1d ff a9 11 03 12 3d 84 9f 35 52 b0 c1 f7 42 88 c6 80 96 b1 ca 3e a1 b5 0d 6b 75 3d 15 8a b6 9b ed 66 f3 5e eb 7e 3d 2c ec 54 Data Ascii: rvFZt66&J5tlIv>\dHV"L@[s<?v5$".;vzHRO$

Source: global traffic	HTTP traffic detected: GET //resources/img/logo_text_de-20200819.svg HTTP/1.1Host: www.swisspass.chConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://jaz.wxk.mybluehost.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //resources/img/logo-20200819.svg HTTP/1.1Host: www.swisspass.chConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://jaz.wxk.mybluehost.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/v1_6_subset/SBBWeb-Light.woff2 HTTP/1.1Host: cdn.app.sbb.chConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://jaz.wxk.mybluehost.mesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: http://jaz.wxk.mybluehost.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //resources/img/logo-20200819.svg HTTP/1.1Host: www.swisspass.chConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
Source: global traffic	HTTP traffic detected: GET //resources/img/logo_text_de-20200819.svg HTTP/1.1Host: www.swisspass.chConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /home HTTP/1.1Host: corporatedefenseetl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: corporatedefenseetl.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /article/top/926 HTTP/1.1Host: custommapposter.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static-res/css/newsike.css?id=98d7a23ace76a572352b HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static-res/js/newsike.js?id=2e2993cb3d75bb3492b1 HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/0/e/f234e7-fc25-4181-9fdc-65d9171ace67.js HTTP/1.1Host: monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static-res/img/search.svg?id=b28071f3b9c4778b36f1 HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/scripts/vendors/xdomain/1.0.8a/xdomain_cookie.min.js HTTP/1.1Host: monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sitesplit/d3/smartzones/0.5.5/0/e/f234e7-fc25-4181-9fdc-65d9171ace67.js HTTP/1.1Host: monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static-res/img/search.svg?id=b28071f3b9c4778b36f1 HTTP/1.1Host: custommapposter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288
Source: global traffic	HTTP traffic detected: GET /?adlocation= HTTP/1.1Host: custommapposter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288
Source: global traffic	HTTP traffic detected: GET /assets/scripts/vendors/xdomain/1.0.8a/xdomain_cookie.html HTTP/1.1Host: monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OOh3bTrtb2nHyOwGk2LTO5SWo54/gpt_and_prebid/config.js HTTP/1.1Host: cdn.confiant-integrations.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest.js HTTP/1.1Host: static.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://custommapposter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=2jqw284&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1013/pbjs HTTP/1.1Host: api.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2224a8fd48c89b8d%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=f9b21ccc-516b-482c-8d07-46a785a9ff3c&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22a9eff797-27ef-4858-8222-460554f555b8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2244ebe088a5a792a%22%3A%22177369c437c672237248%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%224582bc388aaa7b3%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%2246e8849f03b0374%22%3A%22d23fc2fbe929165f22f9%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=87d04680-5b04-4f64-a7a6-318419b14292&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%229dd37192-48ae-4f98-b6ca-868e1caf908c%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/p
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=p.d.l&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Farticle%2Ftop%2F926%22%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289673&to=240&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289738&to=240&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105834&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289739&to=240&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105836&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289739&to=240&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105835&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=2jqw284&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2224a8fd48c89b8d%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=f9b21ccc-516b-482c-8d07-46a785a9ff3c&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22a9eff797-27ef-4858-8222-460554f555b8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=1d2b02af-5fab-4505-b4f4-80582e7038de; _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; HAPLB8G=s8558\|Zkxnn
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2244ebe088a5a792a%22%3A%22177369c437c672237248%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%224582bc388aaa7b3%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%2246e8849f03b0374%22%3A%22d23fc2fbe929165f22f9%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=87d04680-5b04-4f64-a7a6-318419b14292&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%229dd37192-48ae-4f98-b6ca-868e1caf908c%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9C
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=p.d.l&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Farticle%2Ftop%2F926%22%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hb/bid HTTP/1.1Host: s.seedtag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1013/pbjs HTTP/1.1Host: api.id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=1_1716283291_1716283291; amuid2=8513443a-0aff-42a8-b16a-97f4fac4a87a; sd_amuid2=8513443a-0aff-42a8-b16a-97f4fac4a87a
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7660f095-8567-4e13-b266-ede79c1f7a19&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22797a0307fc4bf82%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=4e23170f-2d7a-4872-909a-a411aabc008d&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22c78b7726-94a5-49a5-bbf8-25c72a2839f8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; __uis=05
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2210162a92428bf608%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3709d71a-8b92-4e14-acfc-4968aee94daf&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%2202588b9a-5621-48fe-8382-ec8a2882ccd6%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; __uis=0
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=c992f38f-79ee-483b-a206-98cc8db521aa&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1Host: exchange.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290788&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290870&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gptprebidnative/202403121239/wrap.js HTTP/1.1Host: cdn.confiant-integrations.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static-res/img/newsike/manifest.json?id=6d0a109cbc6d45f4e64b HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/latest.js?_=1716283290225 HTTP/1.1Host: static.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202405090101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1 HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /publisher.js HTTP/1.1Host: client.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /configs/76b6d1d8-9f58-4ac7-a92e-f3232afccc8a HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7660f095-8567-4e13-b266-ede79c1f7a19&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=c992f38f-79ee-483b-a206-98cc8db521aa&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22797a0307fc4bf82%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=4e23170f-2d7a-4872-909a-a411aabc008d&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22c78b7726-94a5-49a5-bbf8-25c72a2839f8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-45be-b12f-751883821122
Source: global traffic	HTTP traffic detected: GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1Host: exchange.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2210162a92428bf608%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3709d71a-8b92-4e14-acfc-4968aee94daf&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%2202588b9a-5621-48fe-8382-ec8a2882ccd6%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-45be-b12f-751883821122
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22131160d90f6a1f9e%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3ba70010-bc4c-455f-9e7b-ada9bdb499f7&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22555ed8b2-faf8-4994-aca8-4b165973dbae%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2216716bff893cdd02%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=5f8c3e71-98dd-4042-8e46-0425cc913dd0&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fbe6b6ea-d48e-4ade-aa54-7827a1dd0cee%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; HAPLB8G
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291547&to=240&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291568&to=240&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=1_1716283291_1716283291; amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: global traffic	HTTP traffic detected: GET /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1Host: prebid.cootlogix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=4GO13tj3WhEj2HICFfD0hDNhoxBFc6OmF8PVZcAGMNfFICfCshdQUQXFAyDHdaUXt%2BdiREWEgGMVtwWVd6cSdxUkBbUGdYdF1WKyx0JQRWRhFhW3IPA3p7cXdeRQ9RNVkhWQd9fSF3BENIH3VdI1lXfHl7fwUWXQQ2XnVaA38qIHJTEF4Re0pwDAF9eiYgUBBdB2NZJloCeX4nJQNDCVd1RGdcBn9%2Fc35WQQhVYll3CwUrL3pwUERZBmZKaUgEe3tyJFZNXARmWX1eB3Aqcn9XQAsGYl1nRhB%2BeyUjU0MJUTMOclhWfHxwfldHXgZmWCRIb2RrICkTGh4RbVhpSFUsOTFkXA8XH3UbIBlBISYtZFxWXFdnXHALCnFkJ3MFRUcEZFEgR1dwcCdrVEJTUDZfJwwEcC13ZEpWCVw5BiAJRiEmLQ8CVlARYVtyDwR9fXUiAxcIC2UMcV8Ae38ldgBMSE4%3D
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22181d2778a224e92c%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=24578392-b58e-46e4-a691-326525b06b4f&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fd12b1fa-734d-470a-a46d-6675c5397d83%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; HAPLB8G=s851
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=f45eddbd1c7299bf9fbebfc2482520f7
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:preinit&_=1716283292042 HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:preinit&_=1716283292042 HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:init&_=1716283292043 HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:init&_=1716283292043 HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291888&to=240&aun=mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_de846181-f60c-4b86-806e-43df382fb3f3
Source: global traffic	HTTP traffic detected: GET /fpd?_=1716283292044&yv=11954&h=custommapposter.com HTTP/1.1Host: u.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291958&to=240&aun=mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%23incontent-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_de846181-f60c-4b86-806e-43df382fb3f3
Source: global traffic	HTTP traffic detected: GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1Host: exchange.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=oAx14TayQsSWHBkxRkjL0MJMAEnOS0wGFpoMEhiUk4wRWE1eHMKG2RfWGNVTWlFNW54dlxafklcZgdMZksyb3AnCB1gXVlhA09oEmNkfndJVHBdWWMAT2FDYGYpIV1MYFxeYFlPN0tqZ3lgR1pkWF01V0hiS2BkeHVcTWpZWWdQHGhFMmFqbklOYVwLYlEaN0cwYy5wCkkwXFw3VkwzRWV1ZGBdS2UKX2xQQWASMGF8cFxMZlNcMlIcN0Bxe2p0WE8zXVsyVUgwEGVjenVfTGpdDGwEGzNRf3V%2BcVseZllYMFNOZxcxNS51U0xnCAhtWRtzX3Fhe3EIT2QOXGNVT2RCZGApIVMeNglTMVBbfVFlZCwkD0pnWV9gA04wETFneiRaTWFdX2JDJH1RMDg9LB9aaFtGdgYdIQFxbTM%2FR1ohDhknCBY%2FUWl1fCENTGcPC2ZMSzUWN3p4cg8cf10IZwRUNBdqY3kmCE1rU15gQ1VzEDw5JicIDDsEBB0FW2tRZWIqcFpJaw4MNVdKMxAxYyl1WxxnUwg2QwQ%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdr&_=1716283292044 HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /hb-mm-multi HTTP/1.1Host: hb.minutemedia-prebid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdr&_=1716283292044 HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290788&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_cabbca77-add4-4919-8833-9161c9af2954
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290870&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_de846181-f60c-4b86-806e-43df382fb3f3
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22131160d90f6a1f9e%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3ba70010-bc4c-455f-9e7b-ada9bdb499f7&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22555ed8b2-faf8-4994-aca8-4b165973dbae%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxno
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2216716bff893cdd02%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=5f8c3e71-98dd-4042-8e46-0425cc913dd0&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fbe6b6ea-d48e-4ade-aa54-7827a1dd0cee%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxno
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292526&bidder=kueezrtb&at=display HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292526&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=2_1716283291_1716283292
Source: global traffic	HTTP traffic detected: GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1Host: exchange.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292527&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292527&bidder=kueezrtb&at=display HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292557&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D; kuid=2013b6fe90781036
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7bde16b5-414f-4c99-b45a-259240a801e0 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292557&bidder=kueezrtb&at=display HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wUc15n5z5WCuUua35IyYFRcKVCU3GzAHEhEPEltvXQIbA2UhRWQUAgUBe05tWg1MU25zQWJXTREDex9sWQ0bDW8mFjBHVwAAK09gDwVJA2JhWXdDUgRUf0lpXQQbVmF3R2JBVQsDL0FgXgRYGXV1RmIRUQIBfkA6XQNIB2Z0FjQWAAsFKE57QhdMBmAiQ2RGWQAGeU5uWw1IBmRyEGxDAAUXZVtvXQIbA2cgE2EWVVUHKEg7WQMZAmIhQ2NXTREDek44Ww1LDWYiFmNBUwQBfUFvCAYfU2RhWXdDUgRUf0g%2FWgQbVmF3R2JBVQsDL0E8DFdYGXV1RmUTVQEHLUtuWFEYVzF0TWFAAlEMcRt7QhdMBmAiQ2dNBAJUKk9tXAJOAW91E2xFVQEXZVtvXQIbADEhFmZGUQQCfEFrXQZLUG51TWNXTREDeh0%2FCgdPB2J3F2IUA1EFex9oWwZMAGFhWXdDUgBWfk88WAJOA2JyQmIUAgtTLRtgCwRYaHthFjoAD0cXc0l1TFIeRSVhTy4ITRFGLAoqB1oUF21hQTYTVQZRKEt0XFEfUXpzRTERTAVXehx0C1FDAWYnFmBMWQcBa1V7DVoUWzIgATwaD3pRa0N7WAAYB2ZyTDATAAUGKxo7WlRNBTN2TTcXQ04%3D
Source: global traffic	HTTP traffic detected: GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1&cbuster=1716283293&pubUrlAuto=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&videoType=flow&floatWidth=&floatHeight=&floatDirection=&floatVerticalOffset=&floatHorizontalOffset=&floatCloseBtn=&flowMode=&flowCloseButtonPosition= HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779 HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wUc15n5z5WCuUua35IyYFRcKVCU3GzAHEhEPEltvXQIbA2UhRWQUAgUBe05tWg1MU25zQWJXTREDex9sWQ0bDW8mFjBHVwAAK09gDwVJA2JhWXdDUgRUf0lpXQQbVmF3R2JBVQsDL0FgXgRYGXV1RmIRUQIBfkA6XQNIB2Z0FjQWAAsFKE57QhdMBmAiQ2RGWQAGeU5uWw1IBmRyEGxDAAUXZVtvXQIbA2cgE2EWVVUHKEg7WQMZAmIhQ2NXTREDek44Ww1LDWYiFmNBUwQBfUFvCAYfU2RhWXdDUgRUf0g%2FWgQbVmF3R2JBVQsDL0E8DFdYGXV1RmUTVQEHLUtuWFEYVzF0TWFAAlEMcRt7QhdMBmAiQ2dNBAJUKk9tXAJOAW91E2xFVQEXZVtvXQIbADEhFmZGUQQCfEFrXQZLUG51TWNXTREDeh0%2FCgdPB2J3F2IUA1EFex9oWwZMAGFhWXdDUgBWfk88WAJOA2JyQmIUAgtTLRtgCwRYaHthFjoAD0cXc0l1TFIeRSVhTy4ITRFGLAoqB1oUF21hQTYTVQZRKEt0XFEfUXpzRTERTAVXehx0C1FDAWYnFmBMWQcBa1V7DVoUWzIgATwaD3pRa0N7WAAYB2ZyTDATAAUGKxo7WlRNBTN2TTcXQ04%3D
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7660f095-8567-4e13-b266-ede79c1f7a19 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fcustommapposter.com&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779 HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=0&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=1&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /hb-mm-multi HTTP/1.1Host: hb.minutemedia-prebid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=i.r&u=KJI01M&d=%7B%22auPath%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDW.A%22%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292952&bidder=kueezrtb&at=display HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292952&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292953&bidder=kueezrtb&at=display HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=Tgn15DZrGHhOd6MWz22uP3gCJjocIQFEPnVAaRBDd20TcXoKf1VXLmFOAAVBcGJEIXFYe1MUYXVMAFRAc2ITf3ANLAEEe2RPUARMJWpBcX1KY0YAfmAbBAJFd2sTJH5cfVMCeW9MVApMdGtQa2pefFNXe2ZJCgFGdG1FcnBafFcHKG5MUwRXaHhEdH8JeVRVK2MZBlRHJWsQcH4LeFFUe2FYHhBDd20TcnBZd1VXLmFOAAVBcGJEIXsNKVcUYXVMAQUUcmsUc3kJLFICf2BOBgpDImIXJSpKY0YAfmccBgBHIGhFcSwKLQIBdWNPUVBMfDhQa2pefFNXeDEYUQFGdG1FcnBafFcHKG5MCgRXaHhEdCwOK1YDf2JOUAUUJjhCdS5ZelcAeGFYHhBDd2kRcH4NeVMCe2JLBQUUJ2IUIypRKlUUEHtYUV0AKi5QfXhEbQNSPSVYCEkIaHgBIjsbJgtYb21YBlETcG8WJnpFfQBTKXpKAlYRaWwQdC1FKgAPeWYeUQdMfG5GZWRKLAtYIzIZRlsaKhMWZXJKeVFUf2ZLC1cTJWxBJSsKewUBfTNPClAXZic%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292953&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=Tgn15DZrGHhOd6MWz22uP3gCJjocIQFEPnVAaRBDd20TcXoKf1VXLmFOAAVBcGJEIXFYe1MUYXVMAFRAc2ITf3ANLAEEe2RPUARMJWpBcX1KY0YAfmAbBAJFd2sTJH5cfVMCeW9MVApMdGtQa2pefFNXe2ZJCgFGdG1FcnBafFcHKG5MUwRXaHhEdH8JeVRVK2MZBlRHJWsQcH4LeFFUe2FYHhBDd20TcnBZd1VXLmFOAAVBcGJEIXsNKVcUYXVMAQUUcmsUc3kJLFICf2BOBgpDImIXJSpKY0YAfmccBgBHIGhFcSwKLQIBdWNPUVBMfDhQa2pefFNXeDEYUQFGdG1FcnBafFcHKG5MCgRXaHhEdCwOK1YDf2JOUAUUJjhCdS5ZelcAeGFYHhBDd2kRcH4NeVMCe2JLBQUUJ2IUIypRKlUUEHtYUV0AKi5QfXhEbQNSPSVYCEkIaHgBIjsbJgtYb21YBlETcG8WJnpFfQBTKXpKAlYRaWwQdC1FKgAPeWYeUQdMfG5GZWRKLAtYIzIZRlsaKhMWZXJKeVFUf2ZLC1cTJWxBJSsKewUBfTNPClAXZic%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:bto&_=1716283293054&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=c992f38f-79ee-483b-a206-98cc8db521aa HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:bto&_=1716283293054&bidder=kueezrtb&at=display HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=Tgn15DZrGHhOd6MWz22uP3gCJjocIQFEPnVAaRBDd20TcXoKf1VXLmFOAAVBcGJEIXFYe1MUYXVMAFRAc2ITf3ANLAEEe2RPUARMJWpBcX1KY0YAfmAbBAJFd2sTJH5cfVMCeW9MVApMdGtQa2pefFNXe2ZJCgFGdG1FcnBafFcHKG5MUwRXaHhEdH8JeVRVK2MZBlRHJWsQcH4LeFFUe2FYHhBDd20TcnBZd1VXLmFOAAVBcGJEIXsNKVcUYXVMAQUUcmsUc3kJLFICf2BOBgpDImIXJSpKY0YAfmccBgBHIGhFcSwKLQIBdWNPUVBMfDhQa2pefFNXeDEYUQFGdG1FcnBafFcHKG5MCgRXaHhEdCwOK1YDf2JOUAUUJjhCdS5ZelcAeGFYHhBDd2kRcH4NeVMCe2JLBQUUJ2IUIypRKlUUEHtYUV0AKi5QfXhEbQNSPSVYCEkIaHgBIjsbJgtYb21YBlETcG8WJnpFfQBTKXpKAlYRaWwQdC1FKgAPeWYeUQdMfG5GZWRKLAtYIzIZRlsaKhMWZXJKeVFUf2ZLC1cTJWxBJSsKewUBfTNPClAXZic%3D
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7bde16b5-414f-4c99-b45a-259240a801e0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=2_1716283291_1716283292
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283293107&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283293110&bidder=kueezrtb&at=display HTTP/1.1Host: gtrack.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
Source: global traffic	HTTP traffic detected: GET /i/20842576?ers=3 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs.html?pt=5261-2296-01&pc=US HTTP/1.1Host: cs.seedtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
Source: global traffic	HTTP traffic detected: GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283293109&bidder=kueezrtb&at=display HTTP/1.1Host: track.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=Tgn15DZrGHhOd6MWz22uP3gCJjocIQFEPnVAaRBDd20TcXoKf1VXLmFOAAVBcGJEIXFYe1MUYXVMAFRAc2ITf3ANLAEEe2RPUARMJWpBcX1KY0YAfmAbBAJFd2sTJH5cfVMCeW9MVApMdGtQa2pefFNXe2ZJCgFGdG1FcnBafFcHKG5MUwRXaHhEdH8JeVRVK2MZBlRHJWsQcH4LeFFUe2FYHhBDd20TcnBZd1VXLmFOAAVBcGJEIXsNKVcUYXVMAQUUcmsUc3kJLFICf2BOBgpDImIXJSpKY0YAfmccBgBHIGhFcSwKLQIBdWNPUVBMfDhQa2pefFNXeDEYUQFGdG1FcnBafFcHKG5MCgRXaHhEdCwOK1YDf2JOUAUUJjhCdS5ZelcAeGFYHhBDd2kRcH4NeVMCe2JLBQUUJ2IUIypRKlUUEHtYUV0AKi5QfXhEbQNSPSVYCEkIaHgBIjsbJgtYb21YBlETcG8WJnpFfQBTKXpKAlYRaWwQdC1FKgAPeWYeUQdMfG5GZWRKLAtYIzIZRlsaKhMWZXJKeVFUf2ZLC1cTJWxBJSsKewUBfTNPClAXZic%3D
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22181d2778a224e92c%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=24578392-b58e-46e4-a691-326525b06b4f&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fd12b1fa-734d-470a-a46d-6675c5397d83%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxno
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291547&to=240&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: icu=ChkI__eVARAKGAEgASgBMJ3PsbIGOAFAAUgBEJ3PsbIGGAA.; uuid2=6403784576581203868; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /g/v2/1013.json HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291568&to=240&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291888&to=240&aun=mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /content/prebid/prebidVid.7.16.0_26.min.js HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /live/liveVideo.php?vpaidManager=sekindo&s=58057&ri=6C69766553746174737C736B317B54307D7B64323032342D30352D32315F31327D7B7331353234323239307D7B4333307D7B535933567A64473974625746776347397A644756794C6D4E7662513D3D7D7B626368726F6D657D7B716465736B746F707D7B6F77696E646F77737D7B583639307D7B593430307D7B66317D7B4C393938317DFEFE&userIpAddr=8.46.123.175&userUA=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&debugInformation=&isWePassGdpr=1&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1&noViewableMidrollPolicy=vary&isDoublePreroll=1&autoSkipVideoSec=15&c2pWaitTime=0&sdkv=&isSinglePageFloatSupport=0&availCampaigns=&isAmpIframe=0&tagKeywords=&cbuster=1716283294&csuuid=664c679d515d1&debugInfo=15242290_&debugPlayerSession=&pubUrlDEMO=&isAsyncDEMO=0&customPlaylistIdDEMO=&sta=15242290&showLogo=0&clkUrl=&plMult=-1&schedule=eyJwcmVfcm9sbCI6MSwibWlkX3JvbGwiOltdLCJnYXAiOiJhdXRvIn0%3D&content=plembed22a2sngqtvwl&secondaryContent=&x=690&y=400&pubUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&contentNum=1&flow_closeBtn=1&flowCloseTimeout=0&flow_closeButtonPosition=right&flow_direction=tr&flow_horizontalOffset=1&flow_bottomOffset=13&impGap=1&flow_width=400&flow_height=225&videoType=flow&isOriginImg=0&gdpr=0&gdprConsent=&contentFeedId=&geoLati=40.7123&geoLong=-74.0068&vpTemplate=9981&flowMode=below&isRealPreroll=0&playerApiId=&isApp=0&ccpa=0&ccpaConsent=1---&subId=&appName=&appBundleId=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&appStoreUrl=&diaid=&appPrivacyPolicy=&appIsPaid=&appDeveloper=&appId=&appVersion=&sdkv=&enableResizeObserverInapp=0&isAppJs=0 HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1Host: exchange.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=Tgn15DZrGHhOd6MWz22uP3gCJjocIQFEPnVAaRBDd20TcXoKf1VXLmFOAAVBcGJEIXFYe1MUYXVMAFRAc2ITf3ANLAEEe2RPUARMJWpBcX1KY0YAfmAbBAJFd2sTJH5cfVMCeW9MVApMdGtQa2pefFNXe2ZJCgFGdG1FcnBafFcHKG5MUwRXaHhEdH8JeVRVK2MZBlRHJWsQcH4LeFFUe2FYHhBDd20TcnBZd1VXLmFOAAVBcGJEIXsNKVcUYXVMAQUUcmsUc3kJLFICf2BOBgpDImIXJSpKY0YAfmccBgBHIGhFcSwKLQIBdWNPUVBMfDhQa2pefFNXeDEYUQFGdG1FcnBafFcHKG5MCgRXaHhEdCwOK1YDf2JOUAUUJjhCdS5ZelcAeGFYHhBDd2kRcH4NeVMCe2JLBQUUJ2IUIypRKlUUEHtYUV0AKi5QfXhEbQNSPSVYCEkIaHgBIjsbJgtYb21YBlETcG8WJnpFfQBTKXpKAlYRaWwQdC1FKgAPeWYeUQdMfG5GZWRKLAtYIzIZRlsaKhMWZXJKeVFUf2ZLC1cTJWxBJSsKewUBfTNPClAXZic%3D
Source: global traffic	HTTP traffic detected: GET /api/1.0/id5-api.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2105897831518875&correlator=3505740865554898&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=9&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1716283297842&lmt=1715994881&adxs=330&adys=1703&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=1&psz=300x0&msz=300x0&fws=4&ohw=543&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GN6W09P5MUgAUgIIZBIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=Flight%3D1%26monu%3D300x250_B1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=4216580245&frm=20&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://custommapposter.comX-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202405090101/pubads_impl_page_level_ads.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=3_1716283291_1716283293
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: icu=ChkI__eVARAKGAEgASgBMJ3PsbIGOAFAAUgBEJ3PsbIGGAA.; uuid2=6403784576581203868; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight HTTP/1.1Host: imps.monu.deliveryConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /se/hb/timeout?publisherToken=5261-2296-01&adUnitId=32073708&timeout=1100 HTTP/1.1Host: s.seedtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0 HTTP/1.1Host: imps.monu.deliveryConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /visitor/isync?uid=513c4e190506981c315d38ccadf488f2&name=SEEDTAG&visitor=&gdpr=0&gdpr_consent_string=&us_privacy= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cs.seedtag.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2105897831518875&correlator=265694873715438&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=10&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283302600&lmt=1715994881&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=1&psz=728x-1&msz=728x-1&fws=512&ohw=0&psts=AOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbRIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D2%26monu%3D728x90_B2%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_bottom%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue%26amznbid%3D2%26amznp%3D2&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=313124495&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://custommapposter.comX-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-L
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fcustommapposter.com&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/video/css/primisslate.css HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2105897831518875&correlator=4081099331167574&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=11&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283303844&lmt=1715994881&adxs=330&adys=1946&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=4&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=1&psz=300x0&msz=300x0&fws=4&ohw=543&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbRIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=Flight%3D1%26monu%3D300x250_B1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_400%26auction_id%3D694fab6f-82e8-4be1-82b8-39a7daa3ec0a%26monu_df%3D0.09%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.09%26hb_size%3D300x250%26hb_adid%3D311a28cb96ae498b%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.09%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse%26amznbid%3D2%26amznp%3D2&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=4216580245&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://custommapposter.comX-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10602318&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hb-mm-multi HTTP/1.1Host: hb.minutemedia-prebid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=06432402-c0d4-41b0-b9b9-42da4286c781&id=&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/infolinks_main.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //pw-reset?lang=de&provider=sbbkn&callback=oevloginhttps://www.swisspass.ch//register?lang=de&provider=sbbkn&callback=oevlogin HTTP/1.1Host: www.swisspass.chConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
Source: global traffic	HTTP traffic detected: GET /cookie/?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAIgAigCMKjPsbIGOAJAAkgCEKjPsbIGGAE.
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=B8HSyGZMZ6oIqsqFR0893g==
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /env.js?v=1715295378 HTTP/1.1Host: www.swisspass.chConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.swisspass.ch//pw-reset?lang=de&provider=sbbkn&callback=oevloginhttps://www.swisspass.ch//register?lang=de&provider=sbbkn&callback=oevloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1Host: d5p.de17a.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1Host: ipac.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=6403784576581203868&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d808e1cc-0051-4b20-a6f8-b93610f0231b; c=1716283307; tuuid_lu=1716283307
Source: global traffic	HTTP traffic detected: GET /consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f/e91f4b90-f9aa-4ace-891b-96dd07595d9f.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.swisspass.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0580edc5dbac4778bfc19398f495dfb8 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5140084931246551630 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /cs/cookiesync/pubmatic?channeluid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1Host: s.seedtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
Source: global traffic	HTTP traffic detected: GET /pull?pid=6298098f-c92c-4c68-bdfc-f454f26a86ac&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D193%26user_id%3D%24BROWSER_ID%26gdpr%3D%24GDPR%26gdpr_consent%3D%24GDPR_CONSENT%26expires%3D1%26ssp%3D%24bidswitch_ssp_id&return-unstable=true&eb=&bidswitch_ssp_id=pubmatic&g=1&gdpr_pd=&gdpr=0&gdpr_consent= HTTP/1.1Host: ws.rqtrk.euConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1Host: core.iprom.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=80&gdpr=0&partneruserid=NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=5439263188312224104
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.swisspass.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpci6ejBNUFrUUXJKU8ELSmOfO
Source: global traffic	HTTP traffic detected: GET /e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D130%26partneruserid%3D%5BUID%5D%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BGDPR_CONSENT%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync/RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DNEXXEN%26ttl%3D720%26uid%3D146e9da1fca8f0ce5e1ef0b5909cc4cd%26visitor%3DRX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283308687&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%23incontent-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /ps/?_=1716283307377.&ri=0015a00003HljHyAAJ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=130&partneruserid=3d12ee56-7200-483f-ad58-25321367cbba&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&ct=y HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=33ACROSS&ttl=720&uid=2f9442d7df2189f76c8b593d5f54ce95&visitor=212615153490303&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsufb617vlmobJcLo5Zq2eHIrx1qN5YMsuveqgc75OV2Xw01ZpBuCkMcPFR3jzR-5R5mk4jq8WmJPD8Q9LvgL80FX3L0cM1_rXyc4ekgfBTeeoA_h9uytObUt4CERqY-PyBva9aMymqigrYWqLedeWAgmz5JKRqUEbx9OqHCZkKcPMmf1M62HYit2tmodPgmK_4pZBDujtuVq1Ljf3lOdMyYPDkyVaqZkGKQNL2705VaE_2BTRa6madFhcMK_T1xHodNKCBj4Fgpx4Y6qVJlG04DnElSlm-APfuLOtnE9q7dvtsUK_vYMhN08QhAJjFGaBKftS62hJiyCj8qb109u382j-1QDF7Fl4um4Y4nypyzL49qSIRT_My715mZxoBvs1c4f36P2W6f3GuEtRjgzI9LGc2mFZkhGoDQMg&sai=AMfl-YQ7_kfQySj5xVt44wMv3JGSsLYmQfn5oh03-OsgwgzCd8dU061jLzznzzqA8Qf6qXyQAQI9vSf6kcF_CX7ZlWHqLJv_ePjSeySFyaYvQslsKM4zT_H3xUqD8HmOyZHpHaKs9MZerJDXp4O_3-bHJg&sig=Cg0ArKJSzCIOKboenOUSEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkf3t8olHR_EUxNf4hTrwYC4PEPFkhlitpzMntdPttbPKRAr_J8sFUOaajViP8
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f/ba92dbb5-02d7-443f-8481-b67e4427328b/de-ch.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.swisspass.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/1931.004-3.034/frame_content.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2105897831518875&correlator=1557359031084804&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=12&sfv=1-0-40&rcs=2&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283311248&lmt=1715994881&adxs=330&adys=1946&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=5&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=300x0&msz=300x0&fws=4&ohw=543&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbRIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=Flight%3D1%26monu%3D300x250_B1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse%26amznbid%3D2%26amznp%3D2&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=4216580245&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://custommapposter.comX-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Ac
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1716283307377.6&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.swisspass.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.swisspass.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/cn1/video/users/converted/31637/video_662121c76b5c9269110138/vid664b1f85041d9344782263_thumb.jpg?cbuster=1716199311 HTTP/1.1Host: video.primis.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63986577&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
Source: global traffic	HTTP traffic detected: GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEOzOrh4jAZUZXA6KnB8RbgI&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=157743&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAMgAygDMK7PsbIGOANAA0gDEK7PsbIGGAI.
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=929149604929207739274; tluid=929149604929207739274
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=tKDruMoLiO40zYZiM5xR_1716283315385; ts=1716283315
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-8Gd5X2hE2uVKWPOiREzgYUmuO.uTv4k-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203
Source: global traffic	HTTP traffic detected: GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: green.erne.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/1931.004-3.034/ice.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /js/1931.004-3.034/frame_inplace.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:6a2e128f-5fcd-4584-b3bf-be195923ce8a&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&xi=33&xu=929149604929207739274 HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; PugT=1716283316; SPugT=1716283314
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=46e9d76a-2f3f-4ca1-6ef6-29684e0ccd1a
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=6403784576581203868 HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent HTTP/1.1Host: pixel-eu.onaudience.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=33ACROSS&ttl=720&uid=2f9442d7df2189f76c8b593d5f54ce95&visitor=212615153490303&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:E4EBEDE8CC0947CFAF5BA10844BF6E7E&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=6937324595 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-8Gd5X2hE2uVKWPOiREzgYUmuO.uTv4k-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEOzOrh4jAZUZXA6KnB8RbgI&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=6403784576581203868 HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253Dtk2EoAPtRYYTTaXUhTWRTahX%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: pixel-eu.onaudience.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=93377026b74970b2; done_redirects282=1
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuLc1lgE8B4gCM_kHhXccRb60TGr960cOyVatZzAnxtodLe9rXjF6x0Fe10MKGdWRkHBdz9vJTCRLQqT7j75QRJSNXROp0U38UflQ7-KNecP-YdFmkywDwhqESah0-OQQKSIsbJUd2END1G4eS6SYmSVY4um3ybrPHFiEYwmQ3B8Tn3RE7OYyAr1W16E4InfwFvnJ6fue2JMuPv_SUumAF1aGj44obIt0P14Vx8nBnRg7veSOGRF3oRfOuXF9tMmMRFFEb65DdWk7UQIw--Tem_m_n_3lruG4ENNQRBQ1vthlWC5lUDjuZFp57YL1rJGdV1Gu6WbzNTG4NzS45HnSA0BOWUl2sgByzROj5dNmmlqpJtRyy518J0bYtyHLezTnlaACv_eG_MFhBs3mlCiw&sai=AMfl-YRvKoxvag-vp-Z6F9d9ppW-5IkcVw94lvwRkBbTmp2slrr7geSp0JDgc_t4aOMggpGmggPVKfrk53zXn7DSqs7v2JqFhal4tIWxsqMmVNoAvjTndA677Kovlso3PeWmEADRdGpl3pPVWgZoVG0s3g&sig=Cg0ArKJSzD7H8NX9PKWfEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/manage?pid=3245929&wsid=0&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: router.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/lcmanage?pid=3245929&wsid=0&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: router.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gsd?evt=afterGSD&pid=3245929&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&jsv=1931.004-3.034&_cb=17162833170010 HTTP/1.1Host: router.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/tradedesk/d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=2CF337632DB31943
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=157743&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317; SPugT=1716283317
Source: global traffic	HTTP traffic detected: GET /static/usync/iqusync-1.29.min.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=B8HSyGZMZ6oIqsqFR0893g==; pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%5D
Source: global traffic	HTTP traffic detected: GET /csync/RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%7D
Source: global traffic	HTTP traffic detected: GET /usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=tk2EoAPtRYYTTaXUhTWRTahX&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317; SPugT=1716283318
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1716283320038.4&ri=70&ru=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fcm%3Fid%3Dc6a5ba0d-ce02-41bd-a1ea-842c68bd5108%26ph%3D8f5ed5d4-642c-4222-968a-d709c87ac3c8%26us_privacy%3D%24%7BUS_PRIVACY%7D%26r%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D70%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1716283320038.2&ri=2&ru=https%3A%2F%2Fssum-sec.casalemedia.com%2Fusermatchredir%3Fs%3D191740%26us_privacy%3D%24%7BUS_PRIVACY%7D%26cb%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D2%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /static/iquid-01.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZkxnuNHM6HMAAHezAHb..QAA; CMPS=983; CMPRO=983
Source: global traffic	HTTP traffic detected: GET /static/id5.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317; SPugT=1716283318
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAMgAygDMK7PsbIGOANAA0gDEK7PsbIGGAI.
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; PugT=1716283317; SPugT=1716283318
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=598ce3ddaee8c90 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=2CF337632DB31943
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /i/ck/infolink?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fiqm-us%3Fuid%3D%7BIQM_COOKIE%7D%20 HTTP/1.1Host: pxl.iqm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=112&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz\|130:3d12ee56-7200-483f-ad58-25321367cbba
Source: global traffic	HTTP traffic detected: GET /ups/58786/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; IDSYNC=18z8~2ijl
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC
Source: global traffic	HTTP traffic detected: GET /usersync2/infolinks HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1716283320038.6&ri=85&ru=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%2F33across%3Fus_privacy%3D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=f0v35ew&ttd_tpi=1&us_privacy= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; TDCPM=CAEYASABKAIyCwjMhLefxuD8PBAFOAFaC2FkY29uZHVjdG9yYAI.
Source: global traffic	HTTP traffic detected: GET /js/1931.004-3.034/in_place.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /static/container-4.0.html HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /action/doq.htm?pcode=utf-8&r=17162833181361 HTTP/1.1Host: rt3007.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=k0cy4N0g HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=561516&ev=1&us_privacy=&rurl=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D5%26xu%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0015a0000344WLkAAM&src=ima&ver=1.10.0 HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /static-res/css/newsike.css?id=d37321569cba76b1fcd8 HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC
Source: global traffic	HTTP traffic detected: GET /did-004d.min.js HTTP/1.1Host: d-code.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?p=156872&pmc=1&pr=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; SPugT=1716283318; KRTBCOOKIE_409=22966-tk2EoAPtRYYTTaXUhTWRTahX; KRTBCOOKIE_594=17105-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003&KRTB&17107-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003; PugT=1716283321; ipc=156872^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID^0^0; pi=156872:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /dyn/apn-usync?user_id=6403784576581203868 HTTP/1.1Host: router.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
Source: global traffic	HTTP traffic detected: GET /bounce HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1
Source: global traffic	HTTP traffic detected: GET /dyn/iqm-us?uid=e714687a-b06b-42cd-94cc-eea520c604e9 HTTP/1.1Host: router.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /dyn/VR-usync?uid=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A HTTP/1.1Host: router.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=39&mi=10&dpi=328512134&pt=17&dpn=1&jsver=5.36&iiqidtype=2&iiqpcid=0248b5aa-e6c9-4839-aaab-d0d2fd63d9d2&iiqpciddate=1716283289724&iiqcallcount=0&iiqfailcount=0&iiqnodata=false&iiqlocalstorageenabled=true&tsrnd=759_1716283320354&fbp=137264047&cttl=43200000&rrtt=0&dud=0&abtg=A&iiqppcc=0 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ppid?pid=0015a0000344WLkAAM&ver=1.10.0 HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=TZvXYgcPoPgLT8-WUnBN
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=929149604929207739274; tluid=929149604929207739274
Source: global traffic	HTTP traffic detected: GET /us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxnp
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=2&external_user_id=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /ps/?xi=5&xu=S5Wxb6bm0jrz&ev=1&us_privacy=&pid=561516 HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1718875322%26external_user_id%3Dd7c589fa-248b-42e0-8bc4-ffb4bdc33d5c HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /cookie-sync/33across?us_privacy= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAJq3k7MmM8AABT0lzVYQg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=ZkxnuNHM6HMAAHezAHb..QAA%26983&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22389b7d7e4a487d6%22%3A%22177369c437c672237248%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%2239d5c0b6874c905%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%22406888e64c6a13d%22%3A%22d23fc2fbe929165f22f9%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=dcd5eb8c-11a2-42e1-8cea-746c54313610&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%2260328105-6223-47cb-90cb-ab02a4522e65%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2F%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%2C%22pba%22%3A%22da2%2F5qVrzBCfhoJZhHtyxA%3D%3D%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22adserver.org%22%2C%22uids%22%3A%5B%7B
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283322453&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105835&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1Host: pixel.advertising.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=328512134&rnd=968176&iiqidtype=2&iiqpcid=0248b5aa-e6c9-4839-aaab-d0d2fd63d9d2&iiqpciddate=1716283289724&tsrnd=928_1716283320357&fbp=137264047&jsver=5.36&abtp=100&abtg=A HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQCDate=1716283323002
Source: global traffic	HTTP traffic detected: GET /idex/did-004d/any?duid=15efe6ffc406--01hyd7acptahsywd92p39kvw1k&did=did-004d&cd=.custommapposter.com&pu=https%3A%2F%2Fcustommapposter.com&_pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&resolve=nonId&resolve=uid2&resolve=index&resolve=openx&resolve=pubmatic&resolve=magnite&resolve=bidswitch&resolve=medianet&resolve=sovrn&resolve=connatix&resolve=thetradedesk HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459
Source: global traffic	HTTP traffic detected: GET /dyn/sonobi-usync?uid=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1Host: router.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=102&ttl=1718875322&external_user_id=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c HTTP/1.1Host: cms-xch-chicago.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283324325&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /usersync/quantcast/byTYNm8ljTd0c49hOyLBYGkk3zF0Jd9nP3ezzg96? HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%222109%22%7D
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22203355575348f86%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=ce7e0257-0a75-4aec-b185-aeb1c1104b4c&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22f596db68-5d7c-4405-b7cf-44eb7f4bdc1f%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2F%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%2C%22pba%22%3A%22da2%2F5qVrzBCfhoJZhHtyxA%3D%3D%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22adserver.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22rtiPartner%22%3A%22TDID%22%7D%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Wind
Source: global traffic	HTTP traffic detected: GET /usersync?cspi=154&ttt=1&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fcons-us%3Fuser_id%3D%24%7BUID%7D HTTP/1.1Host: e.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
Source: global traffic	HTTP traffic detected: GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZkxnuNHM6HMAAHezAHb..QAA%26983&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=370113415ce14bfc98e1fd71fab41459 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283324567&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /5abf3d2eff2f70c0a0669cd9f0f84ba0.gif?puid=[UID]&redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmgid-us%3Fuser_id%3D%5BUID%5D HTTP/1.1Host: cm-x.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://router.infolinks.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1716283324432&did=did-004d&se=e30&duid=15efe6ffc406--01hyd7acptahsywd92p39kvw1k&tv=v2.14.3&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ext__pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&wpn=lc-bundle&cd=.custommapposter.com&c=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-PGgxIGNsYXNzPSJlbnRyeS10aXRsZSBtYi01IHRleHQtY2VudGVyIGZvbnQtc2VtaWJvbGQgdGV4dC0yeGwgeGw6dGV4dC00eGwgIWxlYWRpbmctY29tbW9uIj4KICAgICAgICAgICAgICAgICAgICAgICAgMTAgQmVzdCBDcnlwdG8gTWluaW5nIEFwcHMgZm9yIGlQaG9uZSBhbmQgaVBhZCAoMjAyNCkKICAgICAgICAgICAgICAgICAgICA8L2gxPg HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=2&external_user_id=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /v1/ppid?pid=0015a0000344WLkAAM&ver=1.10.0 HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=b.r&u=7bde16b5-414f-4c99-b45a-259240a801e0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dyn/apn-usync?user_id=6403784576581203868 HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274
Source: global traffic	HTTP traffic detected: GET /dyn/iqm-us?uid=e714687a-b06b-42cd-94cc-eea520c604e9 HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
Source: global traffic	HTTP traffic detected: GET /um?redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fcad-us%3Fuser_id%3D$UID HTTP/1.1Host: cs.emxdgt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gptprebidnative/202403121239/wrap.js HTTP/1.1Host: cdn.confiant-integrations.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=i.r&u=KJI01M&d=%7B%22auPath%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDW.A%22%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7660f095-8567-4e13-b266-ede79c1f7a19 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=c992f38f-79ee-483b-a206-98cc8db521aa HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=ysE118IZ39XMqxHHQ2sqUkssIxQKO2oCEngFCmwoSEB4fForaVBdbi4UHHp4W3ptBlt6YVNNLnsNej8BATx6RUx5Kwh5awRdOyhGGypqFGtvVQo9eUFAcStafm1SD2h9QE8rKwx8PgcbdG9EHnt9Cyw8BV1veUVJK3gIeG1XWj16EhxqZBp%2FaFVcbXoSGiwuD3s%2BBwxrdUBLfH0JeTsRFXp7RU9%2BeAB5b1FfbXxDGX8rXnBsBQlreEBaZGoOemgCW2h0R095eQB9bwtaaXRATCl9DXx4HxtufkYdeXoKe2sLCD0vE0ksew18blEIOnpTVGp%2BDXw8BwFtfkdIfikJKGgEATx5Rhl4fAFrBx8bOyIEFjxqAnl2EV48PQNacjNFZXhAXCs%2BGBcmagJrbFcJbHgQQHFlXHw5AhRvfkgdZS0AcD4eC250Ehl%2FKl5%2FYlcNemFTGycmViw5R1A3IzgcanIaf2kEXG54RU4sLVsrYgFdbHhDS34uCC9iEUQ%3D
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?aax_id=AAX8RN661&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
Source: global traffic	HTTP traffic detected: GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1Host: exchange.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=xa715ipb6keZdSdYi3IwElISVxkRNAEhF3tTaGtBWkcDAFkHalUyB29dAX5DXUhUUFJVblNxSHtfAS9CXkgDDlMAOQFhUmpcUX9OCEBRAF5HdkZlV24IBXlHWkEDVV1RaFNnUGFfVXFOWUFAGklTaVM3VGhdBHAUWkZQBFpSOQUwBWFZUn5VRVJUBVwEbFVgXGpaA35AXEhQBVhUP11lBW9LH2tBWkcDAFsGPFAwUD9bUngVXkYBAV4HbFJxSHtfAH4WXEhTDloEOVJnVm5dB3FBD0MHUFhHdkZlV24IBXgRXUEDVV1RaFNnUGFfVXESCxJAGklTaVQ1UGtbV3tAXxQAVA1SYlBmBztQCytVRVJUBVgGbVI2Um5dBXxGXkcDVVMDPgZqAWhLH2tBWkcDAFldP1UyB29dAX5DXUhUUFJVblZxSHtfAC0RDUJXBF5ROFMyBjtZAS9GXENUA11HdkZlV24IBi8VCkNRBlxSb1xhV2pYVnBBUUZAa0dHOQsmCi1LCXlbSxcGRhlHYB8uSHsaVjoEAB8MFFFHbgc1UGwNUntaWxQHUkZVagA3SW8LACxaDBRbAloBOVFqXG1dEWVVCh8MWA4GLg08ChANEXNVX0UABFpUYwE1BW9aUSoVXRFVBg9QYgYxRiQ%3D
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=54676881&p=156972&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; KRTBCOOKIE_409=22966-tk2EoAPtRYYTTaXUhTWRTahX; KRTBCOOKIE_594=17105-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003&KRTB&17107-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003; PugT=1716283321; chkChromeAb67Sec=3; SPugT=1716283322
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
Source: global traffic	HTTP traffic detected: GET /ss/2000033.html HTTP/1.1Host: sync.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
Source: global traffic	HTTP traffic detected: GET /search-article HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283321.0.0.0; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22203355575348f86%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=ce7e0257-0a75-4aec-b185-aeb1c1104b4c&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22f596db68-5d7c-4405-b7cf-44eb7f4bdc1f%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2F%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%2C%22pba%22%3A%22da2%2F5qVrzBCfhoJZhHtyxA%3D%3D%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22adserver.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22rtiPartner%22%3A%22TDID%22%7D%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: none
Source: global traffic	HTTP traffic detected: GET /dyn/sonobi-usync?uid=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
Source: global traffic	HTTP traffic detected: GET /dyn/tplift?uid=929149604929207739274 HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
Source: global traffic	HTTP traffic detected: GET /fpd?_=1716283326048&yv=35705d2&h=custommapposter.com HTTP/1.1Host: u.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
Source: global traffic	HTTP traffic detected: GET /static-res/css/newsike.css?id=98d7a23ace76a572352b HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283321.0.0.0; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ffIf-Modified-Since: Tue, 21 May 2024 07:30:56 GMT
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZkxnuNHM6HMAAHezAHb--QAAA9cAAAIB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dyn/qc-usync?&uid=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
Source: global traffic	HTTP traffic detected: GET /dyn/ix-usync?uid=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
Source: global traffic	HTTP traffic detected: GET /s/v3/pr?exlist=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-OutbrainAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7bde16b5-414f-4c99-b45a-259240a801e0 HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dyn/cons-us?user_id=c0c42e7a5092458e842e7a5092558e63 HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
Source: global traffic	HTTP traffic detected: GET /dyn/mgid-us?user_id=87977e68-6187-4e81-a1fa-160458044ff2 HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
Source: global traffic	HTTP traffic detected: GET /static-res/js/newsike.js?id=2e2993cb3d75bb3492b1 HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283321.0.0.0; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ffIf-Modified-Since: Tue, 21 May 2024 09:10:49 GMT
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2273347548520925&correlator=3220266305235650&eid=31083354%2C31083555%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=7&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283328709&lmt=1716004133&adxs=803&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2F&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283329&ga_hid=310703479&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283320832&idt=5735&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D300x250_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_500%26auction_id%3Deda2b4db-d900-478b-a6a1-d9583667eaaf%26monu_df%3D0.05%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.05%26hb_size%3D300x250%26hb_adid%3D2068267cdfb948d%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.05%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D1%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=434882259&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://custommapposter.comX-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-site
Source: global traffic	HTTP traffic detected: GET /dyn/emodo-us?uid=cb2dc2ef-726a-48b8-b89a-4495efb3863c HTTP/1.1Host: router.infolinks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 2a259ff2a1bbf1c711ae44c0a054e408.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283328986&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=c992f38f-79ee-483b-a206-98cc8db521aa HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=p.f.i&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2F%22%7D HTTP/1.1Host: imps.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283330491&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331453&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331458&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331467&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159988&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dpubmatics2s%26userId%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; KRTBCOOKIE_409=22966-tk2EoAPtRYYTTaXUhTWRTahX; KRTBCOOKIE_594=17105-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003&KRTB&17107-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003; PugT=1716283321; SPugT=1716283322; chkChromeAb67Sec=4; pi=156972:3
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=2 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz\|130:3d12ee56-7200-483f-ad58-25321367cbba
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=amazon&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=aps&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=prebid&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sync.serverbid.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?id=6403784576581203868&ex=appnexus.com HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAUgBSgFMMTPsbIGOAVABUgFEMTPsbIGGAQ.
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2NvbnN1bWFibGU6NzI4eDkw&v=5&s=v31hud7ammd&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjkyNTgzNzIsImwiOjU1MjkwOTk1NjYsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREguQSIsInkiOjAsImNvIjowLCJzIjoibW10LTdiZGUxNmI1LTQxNGYtNGM5OS1iNDVhLTI1OTI0MGE4MDFlMF8xXzFfYWQifX0%3D&cb=7376749&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwyTnZibk4xYldGaWJHVTZOekk0ZURrdyIsIndkIjp7ImsuaGJfYmlkZGVyIjoiY29uc3VtYWJsZSIsImsuaGJfc2l6ZSI6IjcyOHg5MCJ9LCJ3ciI6NDB9 HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/1013/8.gif?o=api&id5id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&gdpr_consent=undefined&gdpr=false HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#3
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=pubmatics2s&userId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=UXU11pe1BCtrg75vC0dBIzEAHAJFRlRKPhN0cEAXXg8FQhIHAiEnQhECUwdGE1YGdyFWXkUCU0VFVlRwexBFUwMEFUBVAHUnFxdQVFdUXEcHcXQRQ1UFB0dIVFQgIUUWVAIAQhJUU3VhWFBSUQYTRFUJeyAWRVBWA0ZAVAYhIEBHAwMXWlJQV3F2RxcBAVFBRFEAIXNEQ1BTVhNHBlVgb1ZEUwADRkhVBCAlQUNVVgIVFlwHdHNHR1YVGVRGVgNzIURLUQAER0hRBHogRUtWA1RDRVATbmFCQAFSAEETB1UkdEYWUwIGTkFWBXdyRBNFGxdARVBXdntBQVEHAxdBBAN1exBGUFYFQklHbG5hFx0SWUFUSlUdYCQQAhUVDw1SDEIHFlZIAVZZBRVJEyUnBABFDRdGUkkTJScEACRYWwUVC0VgeVZQSxVABSAXWDQiFwtFDRdUDUkTMSYHAQ5YW1RKRwcmc0BHBg8MWxRQUnNuQ0FeUhgTSFxVb3FCSwRWAhQWUwkmd1ZeRVRaGB4AUjYqGxwuUxdMUlMCdSZCR1MBURMTBwlwJ0BHVQQDEEADCWBvVhsUflMEEQhUYHkAABJSSA%3D%3D
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283335562&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159277&pu=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2069.5%2F%23PMUID%3Fzcc%3D0%26sspret%3D1&rndcb=8878711658 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; KRTBCOOKIE_409=22966-tk2EoAPtRYYTTaXUhTWRTahX; KRTBCOOKIE_594=17105-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003&KRTB&17107-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003; PugT=1716283321; SPugT=1716283322; ipc=159988^https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dpubmatics2s%26userId%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D^0^0; pi=159988:3; chkChromeAb67Sec=5
Source: global traffic	HTTP traffic detected: GET /static-res/img/newsike/manifest.json?id=6d0a109cbc6d45f4e64b HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 21 May 2024 09:19:45 GMT
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=3&src=2&cspi=0&cn=3&spui=&dpui=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=smaato.com&id=2529e00f0e HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562763&ev=1&rurl=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5548%26spui%3D%26dpui%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=S5Wxb6bm0jrz; VP=part_S5Wxb6bm0jrz; pb_rtb_ev=3-1rhg\|80p.0.1; pb_rtb_ev_part=3-1rhg\|80p.0.1; INGRESSCOOKIE=0f167cab1ae3fdea
Source: global traffic	HTTP traffic detected: GET /rtv/012405101652000/amp4ads-v0.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D4%26spui%3D%26dpui%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22145282c710b80995%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&s=7d2ce4ad-4093-454f-a27c-14342532770c&pv=53296ce7-fb97-4278-9d3f-061d9624f896&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22c2c2a659-393e-42b2-82ac-eee8f38bc487%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A2%2C%22pba%22%3A%22u1Cch%2Bf1ebiecb1cHXxR3A%3D%3D%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22adserver.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22rtiPartner%22%3A%22TDID%22%7D%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User
Source: global traffic	HTTP traffic detected: GET /hems/pubcid/?domain=custommapposter.com&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762 HTTP/1.1Host: context.monu.deliveryConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283338030&to=240&id5Id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&id5IdLinkType=2&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&id5id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012405101652000/v0/amp-fit-text-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283338327&to=240&id5Id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&id5IdLinkType=2&aun=mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad&id5id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%23incontent-1&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /rtv/012405101652000/v0/amp-form-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=appnexus&userId=6403784576581203868&gdpr=0&gdpr_consent=&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=FtL112rUvKzIEDSDSVAlFzkOJyA2IGYIKXdDLUl8diFhfFZFYUJ6GXl1dWQgURdiFSlYZWdyYHNXQ2dEeUtxdCExJgMWZkN%2BTit0JmRmHlBgEHgffXV8aidQRWIXfUp5dHMwJwZHMUJpVmtwImBxARczQC9NfXF1MHQCQ2ISKB9%2BJiBxaBBEYUF9SnF1cTEiB0NnF3wZL3xyZXQBR2RUZ1h%2FdnZiJgJLY0F6S3FxcWsnA0tkQipPfHBmf2YEQWETckJ5cSYxd1EWYxUuHnt1J2BzBxB3WmlMeyMhZnNREDEQfEgtcXFgfANBYUN6SihnaHFyB0czQnNPenN0ZSUDE2dBcx59ciVjcAtQCFppGSYwKidmCEJ5VCweOTdmaT8QGyYzHlhzIyU%2FN1dedxEvCjtnfnF0EF53ES8KOwYrPTdXHCFUcVhraWYmN2IAPAAqGTBnfnFmT153BS4JOiwrPWYIUGMSe058JHxqaVZHNkdmTXp8IX4hCksxW3lMcCYlZCZURG0Sf1hlZyc8KlwXNgIiFScMIHF%2BEERmQS5MfHFyNyFREG1EL058d3dlIgIUbVRnWCA2DTU2Ux8wVHEOOzAhLg%3D%3D
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=3&src=2&cspi=0&cn=3&spui=&dpui=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
Source: global traffic	HTTP traffic detected: GET /cs/cookiesync/pubmatic?channeluid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1Host: s.seedtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283309626:1716283309626
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQGAxVwddf04pIT62KhLd-g7eRqB9ps-wPd6BHpiJPGExfOkOp1XT42tlYZ-Z74X4dz3_Lmj_2-yZvnPXCtAMDDt4uT-A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012405101652000/v0/amp-analytics-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /se/hb/timeout?publisherToken=5261-2296-01&adUnitId=32073708&timeout=1100 HTTP/1.1Host: s.seedtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283309626:1716283309626
Source: global traffic	HTTP traffic detected: GET /usersync?gpp=&gpp_sid=&ttt=1&src=2&cspi=0&cn=5528&spui=&dpui=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D4%26spui%3D%26dpui%3D%24UID&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IsTyALZHNuVjvTOGTxWA7BW5
Source: global traffic	HTTP traffic detected: GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1 HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ju/cs/amazon?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID HTTP/1.1Host: trace-eu.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync3/pubmatic/2069.5/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?zcc=0&sspret=1 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222069.5%22%7D
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 1261c6478a9a9c0ed2fa7ce6d52becf9.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/20842576?ers=3 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=baidu.com&id=22210ca72884d990241bti00lwg6sdrn HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /nmedianet.js?cid=8CU551556&ydspr=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuausArccfR5bCUWPb1Si8Q7aGxuVlqFwotojvmO0bH7TNXTx89oapxI9iMwH5E5J4L5MXmT82LLjwo3dF59FsAWzYsNutnwhH1rpTuxg1twK6mVpIh4basDdyzDFO9-PLWZNpezvuN3wxfRv904MLlp3q0uNJ-3ALqEKLGhKO1Mu_3QT9XpZZdKNkmBqw91cqG5bezAQtIEMFTdF5ggKW5LKWBMlHjGZpCzneSSDVVNUHH36N_zcNDj6RXoBawgRwMRCjY8ZdAzSqQw44cuDJi_QI6RKcBT0fZMRkhIENhg7bUdflDVBSAMVYGy6Fer8-PJ3XHGaW0jSCN05eNUdkCAFZroSZVtZCI8zU7SRtrjq9NB2V0p-EuLlQOYtY_PI9NLWgTUBn8Yjj9aqh6Uw&sai=AMfl-YTFULuL5l-XlpJtUCmCzu9QMr9ZBLC8Z8ZX4_2jj3AvLP8WKWLJo5duTdfY3vY4xgAMYaoKhUwg7KRcw_J_3bUqzig1kky8ZuAyRW5lr3XqTsCzOao05HFKRFP-svz84M3xD70WO3mKR5FgD7hUaQ&sig=Cg0ArKJSzOT93KDPV1RcEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1&cbuster=1716283341&pubUrlAuto=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&videoType=flow&floatWidth=&floatHeight=&floatDirection=&floatVerticalOffset=&floatHorizontalOffset=&floatCloseBtn=&flowMode=&flowCloseButtonPosition= HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=FtL112rUvKzIEDSDSVAlFzkOJyA2IGYIKXdDLUl8diFhfFZFYUJ6GXl1dWQgURdiFSlYZWdyYHNXQ2dEeUtxdCExJgMWZkN%2BTit0JmRmHlBgEHgffXV8aidQRWIXfUp5dHMwJwZHMUJpVmtwImBxARczQC9NfXF1MHQCQ2ISKB9%2BJiBxaBBEYUF9SnF1cTEiB0NnF3wZL3xyZXQBR2RUZ1h%2FdnZiJgJLY0F6S3FxcWsnA0tkQipPfHBmf2YEQWETckJ5cSYxd1EWYxUuHnt1J2BzBxB3WmlMeyMhZnNREDEQfEgtcXFgfANBYUN6SihnaHFyB0czQnNPenN0ZSUDE2dBcx59ciVjcAtQCFppGSYwKidmCEJ5VCweOTdmaT8QGyYzHlhzIyU%2FN1dedxEvCjtnfnF0EF53ES8KOwYrPTdXHCFUcVhraWYmN2IAPAAqGTBnfnFmT153BS4JOiwrPWYIUGMSe058JHxqaVZHNkdmTXp8IX4hCksxW3lMcCYlZCZURG0Sf1hlZyc8KlwXNgIiFScMIHF%2BEERmQS5MfHFyNyFREG1EL058d3dlIgIUbVRnWCA2DTU2Ux8wVHEOOzAhLg%3D%3D
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=2&cspi=0&cn=4&spui=&dpui=IsTyALZHNuVjvTOGTxWA7BW5 HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2NvbnN1bWFibGU6NzI4eDkw&v=5&s=v31hud7au49&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjkyNTgzODQsImwiOjU1MjkwOTk1NjYsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREEuQiIsInkiOjAsImNvIjowLCJzIjoibW10LTc2NjBmMDk1LTg1NjctNGUxMy1iMjY2LWVkZTc5YzFmN2ExOV8xXzFfYWQifX0%3D&cb=4264316&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwyTnZibk4xYldGaWJHVTZOekk0ZURrdyIsIndkIjp7ImsuaGJfYmlkZGVyIjoiY29uc3VtYWJsZSIsImsuaGJfc2l6ZSI6IjcyOHg5MCJ9LCJ3ciI6NDB9 HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=12_1716283291_1716283340
Source: global traffic	HTTP traffic detected: GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid=77&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVcG-cP31phx7Rj168nGI4hx9CH1hnFpEcZajR6QOQpi6FnhhxQOxY3_slJYXJXw8tv2EgEiFozw5geU56wHXQ7JnrMA18PMavwL04Bz2JffLH6Q9_2F3L3GeBhKOuUn9OkpZjCvA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzE2MjgzMzQyLDI2MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwczovL2N1c3RvbW1hcHBvc3Rlci5jb20vYXJ0aWNsZS90b3AvOTI2IixudWxsLFtbOCwid1NuTFo3M2FaQTgiXSxbOSwiZW4tVVMiXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync/iframe/?cid=65b2119efa63bcb4a70d58bb&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wxX13Vswd8pQWAJ4F1LVEHBUoEPzIzORZ8anRFRFNZRmM1cXtVJQdiQUBQDEhnMXh6AHETelFBVl5FZm8gcgwjUjNBQVcNEmduIHoHcAR0X1VSC0cwYXF6B3dQNUVDVg9EZW93LAx%2FAWdRW0YOQ2Y2d3sHfgJlQ0BTDUhjZHJ7UX8HN0VVSBpGYmAgfAQlV2IQQwIKEWA1dnxXcQQ0RUFGFFJnZHYrAX4AbkIWBw5EY2B1fgxwV2UWEVcaXHNhcn1VcAAwR0YFW0ZlZXZ%2BAH4HMEsSBlpSfXV3eQQgBWRBE1YPRjU1IywDfgVjEBVdABJze2N8B3VSYUUSUg9EZ2JwfQMnUm4VEwYBFWB1bWgCdQY3RhICCUQyYyd4VXdTYUUUUw1EN2FjZhZwAjIVE1YNQmRjI31VJFNmQRFVDUNnYndoGGQHZUQTVAlEZm4ieQJ0A2dEFAVbEWlnIH0WahNgQEAFDkNlM3UpACADN0IVUw4TZmFwLgxkHXRFRFNZRTdidXtVJQdiQUBQDEhnMXl4BHATelFBVw8RZDEjKQd1AWFEQlwKQ2JmJHMCfgd0X1VSC0cwYXNyUXdQNUVDVg9EZW93LA12BWRRKkgaEz4iLz4WfAF6URAASAJzbTo3GGRCMwAEDVcec21jflcgBWMXFlYVQjUyJWcEdlUyXkEGCxV8MiVzAHdVNUZOXAxEc3tjKVsoXzMQAw1XHhgzY3AWcAQ0QUZVARU3Nnd5ViVTYhJAVFxFaTUjaEk%3D
Source: global traffic	HTTP traffic detected: GET /ss/2000033.html HTTP/1.1Host: sync.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63If-None-Match: "e38bb0a0fe3342dbe3b05144c01ddd70"If-Modified-Since: Mon, 20 May 2024 14:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkf3t8olHR_EUxNf4hTrwYC4PEPFkhlitpzMntdPttbPKRAr_J8sFUOaajViP8
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.3701101614914333 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gm/v3 HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#4; 3pi=
Source: global traffic	HTTP traffic detected: GET /static-res/css/newsike.css?id=98d7a23ace76a572352b HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283337.0.0.0If-Modified-Since: Tue, 21 May 2024 07:30:56 GMT
Source: global traffic	HTTP traffic detected: GET /static-res/js/newsike.js?id=2e2993cb3d75bb3492b1 HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283337.0.0.0If-Modified-Since: Tue, 21 May 2024 09:10:49 GMT
Source: global traffic	HTTP traffic detected: GET /cookie-sync/amzn?redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAJq3k7MmM8AABT0lzVYQg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /c/hb/bid HTTP/1.1Host: s.seedtag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283340902:1716283340902
Source: global traffic	HTTP traffic detected: GET /us?loc=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dsonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; HAPLB8G=s85190\|Zkxnz
Source: global traffic	HTTP traffic detected: GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283328986&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /v/s/244/trk.js HTTP/1.1Host: cdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAggCCgIMMzPsbIGOAhACEgIEMzPsbIGGAc.
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=TZvXYgcPoPgLT8-WUnBN
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&cb=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D6294%26spui%3D%26dpui%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=12_1716283291_1716283340
Source: global traffic	HTTP traffic detected: GET /sr/2722522032/SAFEFRAME.html?ule=3176&&kkdd=nu%7Ch%7C9uAHn3&E4=(f(7eKRRURqUjRhjeKe&)Snp=h&Ptno=h&stLn=h&ZSE=(eRR&vtZ5=cjh7&Z4S=KFWjj(jj7&ZnZS=3d.eGTDMgX1QZSIeqpUE5d%3D%3D&Zp4S=KKjRKqRRe&t4i5=RhhA7hh&ZZ=W~&tZ=bg&ZL0P=tPPXP4)pov4l0Xv5tv&n4S=KIYbe7rhR&vn4S=Ve(RRUe&Lvvnt=(&ppp=vi!2LcZ2c2n)p~W3D_GaLyB_VXf~PtK0!y)I~2nB2BT._QmtjhCIGz_!lCzB&NspM=Lvvnt%3A%2F%2FZmtvlPPonnltv5p8ZlP&5NspM=sffD3%3A~~bA3fPrr(DDP3fgc8bPr&0t5=j&s=(&m)S=U&oSv(=KFWUU3_(!&oSve=7K(e7Rqq(&TSovo=tSe%3D0m*94mpX%3Deh9E4ej%3De79l)5pnP%3Dh8j(9SlPXT%3Dh8U(9Tov%3Dh%2Ch%2C(9tZS%3D0.9po5%3Dh%2Ch%2C2(9SlPX%3Deh9EepXtS%3DeheUhje(he94mpXT%3Dqfh87R9mpXvNZ%3Dh9mpXpeoXT%3Dh9tvS%3DRehqhqU79pov%3Dh8hhh%2Ch9ZvAEepXtS%3Djhj94n%3DqLGDM9MTT%3Dh9p44nmo%3Dh%2Ch9pZ%3De%2CRqKjU9Pv4S%3DIYhhhhej9pntXtS%3DeheUhje(hU9poSE%3Dh8hhh%2Ch9mpXT%3D(8hR9EepXmpXT%3Dh9tPPXsp%3De8j7((9mpX%3Deh9tE%3D(q8(K9)Zov%3Djh(Uhe9STt4S%3DIOh(h9TT%3D(Rj9tPPXPm%3Dh8KK95pnP%3Dh8j(9EepXmpXNZ%3DhDh9nt4XZ%3Djq7ehh9TP%3D(9pN5%3Dh%2Ch%2C2(9oRnXT%3D78jq%2C(e(8Re9tS%3Dh9pXspXT%3DRff8(7%2Ch9m4S%3Dezo-Y4_LaI7SPy6oyF9ZEepXT%3Dj8ee9TvS%3DjRehqKUhjhUfURfRqK(Kq(jej7fj(ff(R7qfKK7f(7(jqKKKf7(jqe7j(hhe(RR((e(fUffRhqe(Kefeqqhqeh7UejjeUK(jUf7KRKRf(ReK9m4P%3Dh9pNv%3Dh8hhh%2Ch9onnX0%3D0l0Xonn9EpXmpXT%3DK(R8h79l)SenXT%3Dh8qq9Tm)S%3DU9tt%3Dbd9ZZ%3DW~9NTXS%3D509m4s%3D2(9Z5%3Dh9pZE%3D(K8(j9Fz%3DR(7U9NTXmZ%3D(9ti%3Djhh90vt%3De9NTXm%3D509NTXZZNt%3D(9Zv%3D05s%20.lpN9TSv%3D(f(7eKRRR(9NTXvv%3D(9SZ%3DK9EepXT%3D78jq9vv%3DRjfej9ZpnP%3D(8Re9mPXn%3Dh8he7e9EsX5AZ%3Dh8RU9E4tXtS%3Djh79mpXpntXT%3DK8qj9SZe%3D(9EXot0%3DRRj79CI%3D8HPon8H9otv%3D9ZEl)%3Dj8(e9E4tXmpXT%3Dh8K(9EepX4XtS%3DeheUhje(he9E4tXmpX%3DRh9NZej%3Dh95v%3D(U9EepX4XT%3Dh8he9p5MXp%3DjSf9E4tXT%3DjKj8(U9EepXmpXE4%3D(Dh9mpXvE4%3Dh95ZnX55p%3DR8Ke9EE%3Dh9ZEepXtS%3Djh79pME%3D78Ke9epXT%3D(hhh9spXT%3DU%2Ch9tPPXtS%3DeheUhje(he9poSn%3Dh8hhh%2Ch9t4S%3DKKjRKqRRe9ZvAEepXT%3D(8jK9mpXpntXNZ%3Dh9NTXtpZ%3DNTT9Esm%3Dh8RU9SenX%3D(h9ZEe%3Dj8(e9RnZM%3D((hh9l)XPtL%3Dh8j(9SPPXtvp)%3DtPPXP4)pov4l0Xv5tv9SenXT%3Dh8qq9TXi%3D(h((K9pntXT%3D(e(8Re9mpXtpntXT%3DK8q79pNsn%3Dh8hhh%2Ch9CIe%3D8HPon8H95AntZlp5%3Dh8((9nT%3Dh87e9pNsS%3Dh8hhh%2Ch94t!5M%3Dh9Iy%3Dh94t4M%3Dh9mpXpnZXT%3Dh9T4S%3Dh8Uj9NTXnv%3Ddpv4Z59mpXpntXpE%3Dh9ZTSn%3Dh8Ujh94v.n5X4S%3De(9t5*5pXvo)X4S%3DRehqhqU79tmnn.Xvo)X4S%3DRehqhqU79E45soT44v.%3Dh8RRfhU(9nlt%3Dh9Zopp45pzS%3Dh9l)T4S%3Dh8j(hhhh9TMp%3Dh8(jR9tm4S%3D9SvZ%3D5otvXtZ9SPPX5pnP%3DMot59SPP%3DtPPXP4)pov4l0Xv5tv9TSnZonS%3Dh9So)%3DtPP9t)Pv%3Dl0)Xvo4XTMXonn5Xv5ZL940t%3Dh9tlTn%3D9LvP%3D(9tPPXon4%3DE(94TZ%3D(90ti%3De9v)t%3D(7hA7hh%7CRhhA7hh9Tto%3DB(9TtT%3DR9Ttn%3D2(9vPA%3DKf9PATNv%3Dh&0vE=h&PPP=n6SfUZ1sejTpeUU_5IO.RqErWQpAeq(NQtg2B-_3tsxWdoYvV(MVm((fnV2a(RXL57SvCe3mVih6-2BhEEDS45Z_3x210-6ks-~lq1rN).zer21gTF.X)VtQkcX31pMxPaR5x)oz53CGaEBlo7GfobyC5o0_L&4s=Rhh&40zMp=(&TSpzS=U7h&T4S=RjUfUR&PZM=f7U7U&.Stnp=(&Novnp5=(&ZoSlPo40=vi!2LcZ2cKavYcUg1l4FaLKvZRdnimRnBK4nh5UIiD%3D&.nn=(&4t4S=j&oSE=Q505po*%20~5opZL&oZv=I-zAMU0bipR6po%2FA)0Aii6-b%2Fo)dmobmo6%2F&n)4S=n(URjKRh(qqveheUhje(h
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=10&cv=31&https=1&cid=8CU44QH1R&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=APPNEXUS_EXPERIMENT&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 1890c53250268d65cfe709175e182771.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hbx/bwin?_e=CvkDCgRid2luIgtfb3lha3RwZXBoeTE5HlzPSlnlPzoIYXBwbmV4dXNCBTEwMDQ4ShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OGoTY3VzdG9tbWFwcG9zdGVyLmNvbXgBigEIZThkOGU0MDKgAVqoAdgFwAGY-QvIAQDQAQPoAQDyAQ8xMTY2NjYzMzI1MzQ4OTGYAo80qQIAAAAAAAAAALICDGFpcmZyYW5jZS51c7oCCTUwMDc0MDk5MsICBDI2NDGaAyBjMGM0MmU3YTUwOTI0NThlODQyZTdhNTA5MjU1OGU2M6IDE1kyOXVjM1Z0WVdKc1pTNWpiMjCoAzTCAwEw4APtkAHqAyA5ZWJjYzNhMjE3NTMxMWVmYTM4YjQyMzZkNGE3YmE0OKIEKmh0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9zZWFyY2gtYXJ0aWNsZaoEA0lTUIoFATGyBQNVU0TSBQkxMDUxOTk1NzfYBQDgBQHqBQdkZXNrdG9w8gUNNEE3TDMzTUw3SlY5Q_oFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&np=0.66714993 HTTP/1.1Host: 1x1.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: global traffic	HTTP traffic detected: GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1Host: exchange.kueezrtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wxX13Vswd8pQWAJ4F1LVEHBUoEPzIzORZ8anRFRFNZRmM1cXtVJQdiQUBQDEhnMXh6AHETelFBVl5FZm8gcgwjUjNBQVcNEmduIHoHcAR0X1VSC0cwYXF6B3dQNUVDVg9EZW93LAx%2FAWdRW0YOQ2Y2d3sHfgJlQ0BTDUhjZHJ7UX8HN0VVSBpGYmAgfAQlV2IQQwIKEWA1dnxXcQQ0RUFGFFJnZHYrAX4AbkIWBw5EY2B1fgxwV2UWEVcaXHNhcn1VcAAwR0YFW0ZlZXZ%2BAH4HMEsSBlpSfXV3eQQgBWRBE1YPRjU1IywDfgVjEBVdABJze2N8B3VSYUUSUg9EZ2JwfQMnUm4VEwYBFWB1bWgCdQY3RhICCUQyYyd4VXdTYUUUUw1EN2FjZhZwAjIVE1YNQmRjI31VJFNmQRFVDUNnYndoGGQHZUQTVAlEZm4ieQJ0A2dEFAVbEWlnIH0WahNgQEAFDkNlM3UpACADN0IVUw4TZmFwLgxkHXRFRFNZRTdidXtVJQdiQUBQDEhnMXl4BHATelFBVw8RZDEjKQd1AWFEQlwKQ2JmJHMCfgd0X1VSC0cwYXNyUXdQNUVDVg9EZW93LA12BWRRKkgaEz4iLz4WfAF6URAASAJzbTo3GGRCMwAEDVcec21jflcgBWMXFlYVQjUyJWcEdlUyXkEGCxV8MiVzAHdVNUZOXAxEc3tjKVsoXzMQAw1XHhgzY3AWcAQ0QUZVARU3Nnd5ViVTYhJAVFxFaTUjaEk%3D
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxWTMajZ8wsJUxxk2ieL2lxKfePL2CnMV1Ey1BF_YvpvjiczO4eUmfyqkBnAhxggfBVpUQewLx82-bng_kWuA5Zj29QGYVfCMWvxDs10PpWgBLJaHDglJIiyiG_gprkx6JZOv377gw==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzE2MjgzMzQzLDU2MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuIl0sImh0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9hcnRpY2xlL3RvcC85MjYiLG51bGwsW1s4LCJ3U25MWjczYVpBOCJdLFs5LCJlbi1VUyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main/js/deflate.min.js HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /content/omid/static/omweb-v1.min.js HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csuuid=664c679d515d1
Source: global traffic	HTTP traffic detected: GET /static-res/img/search.svg?id=b28071f3b9c4778b36f1 HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283337.0.0.0If-Modified-Since: Tue, 21 May 2024 09:08:10 GMT
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1Host: sync.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=dFf142JDhjx0i4Z0GeISWg0CRgMXgxGKRJ9PmsHLHddWR0CUVBtBHNUKgJ6dV8OG1VeVzgSa0d%2FAX0hWVhKAlgMa1UlB3hWeXFdXhoBCwN4HGVQLwEvcFhSQVMLA21RcVV5A30nC15NVF0WdhJyA3oHeSEOXBwHXQBrU3dVeAUuJw1dG1RLGHgGc1J%2FAnJ0XQgeBVgGOwckA3AEfHRbX0kSRRZsA3VUKwJzcl9bSQhdAWJTdlx4BitxXV9aHEsCaQQiXHECfiYKWRtUX1c%2FVHVVKgF9cQpIVBJfBjxVclIqUC4iX1gcBFwHYgF0UXwDeiVKRloGXAE8BH9QegR6cglbGQJeDD4EcAR5BnNmNUZaUwZBNERlX3keaCMMGgoSU094WTQgHBBwIgkGC1VFFj1UNxdrCGh0SkZaVw1EKHMoCzpXJDBKUFoSRRYvQxcXIEQrJxFIQhJLSXYSNAA6QSMrBkhCEl9QagRyBHELZyBdCUkdXgdjVWoAcQsuaVpcQVMIAzhWcV0tBmhoSgkXXgdROUQuCid7LmZSSE4DXlFsBXNTLVcpJlBYHARcBmkGIVUvCmhoSgMLeQ9GO10iR3NGODENFw%3D%3D
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dopenx%26userId%3D%7BOPENX_ID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=outbrain.com&id=TZvXYgcPoPgLT8-WUnBN HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cba2049f505b2d944b6%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAggCCgIMMzPsbIGOAhACEgIEMzPsbIGGAc.
Source: global traffic	HTTP traffic detected: GET /register2.php HTTP/1.1Host: synchrobox.adswizz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adswizz/js/SynchroClient2.js HTTP/1.1Host: cdn.adswizz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.35819143106914053 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6403784576581203868; receive-cookie-deprecation=1; XANDR_PANID=9-XqJteXZw8rDhfIwbDjTOycjFAHG7sd3WHY_0AvhD_0EUMRQVLn9EpKtkGmfDS8Th1Pn9j__GviylpIHivULN6dgx1NXuYwB1pNzSUxHoY.; icu=ChkI__eVARAKGAggCCgIMMzPsbIGOAhACEgIEMzPsbIGGAc.
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /usa?loc=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5444%26spui%3D%26dpui%3D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; HAPLB8G=s85190\|Zkxn1
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /include/images/promo_bounty/300X250.jpg HTTP/1.1Host: www.idrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://1890c53250268d65cfe709175e182771.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/cookiesync?source=c91bfcce-bb43-46f7-b14e-567c0a4332b3 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?ttt=1&src=1&cspi=0&cn=5573&dpui=419fdeb2-d93b-4065-8361-053e6f939d20 HTTP/1.1Host: x.serverbid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
Source: global traffic	HTTP traffic detected: GET /cchain/0/1119?gpp=&gdpr_consent=&gdpr=&gpp_sid=&us_privacy=&A=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&bidder=appnexus&cbx=aHR0cHM6Ly94LnNlcnZlcmJpZC5jb20vdXNlcnN5bmM_dHR0PTEmc3JjPTImY3NwaT0wJmNuPTYyOTQmc3B1aT0mZHB1aT0%3D&uid=6403784576581203868 HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; _sv3_0=1; __amc=15_1716283291_1716283352
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 2e5745ad01ecb0782e09eebcc467bce9.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rubicon HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%7D
Source: global traffic	HTTP traffic detected: GET /rtv/012405101652000/v0/amp-ad-exit-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=kueez-sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.kueezrtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=a4F14RzBdUGJNDA2dtPKVgyBSczJCs2MhBeL3JkSXUFY3UofnUgUVJAYmVOdlxjIXN%2BcHYQSFZmYBx3U20mcnYhIldWQmNnGHRdNHd5eHFjHkZCY2UbdFRldHsvJ3cGVkNkZkJ0Am1%2Ben9mbRBSR2czTHNXbXR5fnN2B1xGY2FLJ11jJnxsaGMEV0MxZEohAmEkfih2IAMGQ2YxTXcGY3FoYmZ3AVMVZWpLelU0JHx6dnYGUExmNEknAmZlZmxycgUFQmE0TnMFNnF%2BfHN1BlxCNmofIAZ3a2h4d3FUUEZiNkh1UjElKChzeQZRFzJrQiBGeWV8fXMlAlVAZ2sZcVJndXt5JyBRBUxgM01gSHdxeX0ndgQBQmdmTHdVYnArLXwnVgZNNWNYbkZjdH0vcSRUVUAzZhxwBWQlfXgndgdQEmZwVmBSZiMsKnZ0AFFAMmUbIAZldSx%2FcXIEUUJyflh0V2ImfH1wJQYHQDZgG3MGYnEpeXJwVlxWfHBMcVM0cix7cHBTB0JkYE12UG1xLHZ2cQRGWHJkSXUFYCEoLXdyAlNDZWpIcVdkInN4fHcQSFZmYU0jUmd%2FL38lIgRQRmdmTnpSM356enZjb0hWMz0PLBB3fXpiZiZWFAZyaAFgDSYCH2x%2BJ1MIBzV%2BWCUAJTVodGZxEEhWNzYKMCc6KTkrKjUQXlZyflg3FwU1IzglIktGTnJwB25GJiI5PS0uXEZOcmYZJFBgIyt8aXNWARB9YkomAHhxKH0hbFcATWRjHiFRbH9%2BemZtEAcbPjwfIRA8KCQHIGMIRkJlMEhzVWwiLC9yclAHFmQzTXIAYH8oLGZtEA0HGTQIIwkwZXA6NjRXGQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=6403784576581203868&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /cchain/1/1119?us_privacy=1---&gpp=&gdpr_consent=&gdpr=&gpp_sid=&us_privacy=&A=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&bidder=index_rtb&cbx=aHR0cHM6Ly94LnNlcnZlcmJpZC5jb20vdXNlcnN5bmM_dHR0PTEmc3JjPTImY3NwaT0wJmNuPTYyOTQmc3B1aT0mZHB1aT0%3D&uid=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.serverbid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; _sv3_0=1; __amc=17_1716283291_1716283353; _sv3_2=1; amdgt_lk%40cfs=0
Source: global traffic	HTTP traffic detected: GET /rtb/resources/release-20231121-135-adperformance.js HTTP/1.1Host: warp.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3592849466404713000V10
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaTs-8X9fq-mOY8SlvySWm8Tolu2xtgpBGMMDsFchGO5GgWkD329H0yUtfgZIjuwefrE9jRmkdwoWotKi-kpsWjhoOVplQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /149837791.v2.pressablecdn.com/wp-content/uploads/2022/04/CryptoTab.png HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static-res/img/newsike/favicon-96x96.png?id=98b4072dae559862b5fc HTTP/1.1Host: custommapposter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/article/top/926Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283348.0.0.0
Source: global traffic	HTTP traffic detected: GET /usync/amzns2s?r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dgg.com%26id%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
Source: global traffic	HTTP traffic detected: GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CtcCShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkYThlOTg0NTAtNjBmNy00MmViLTkxYzUtNTM3ZTIzYmQ1YWQxogRiaHR0cHM6Ly9jdXN0b21tYXBwb3N0ZXIuY29tL2FydGljbGUvdG9wLzkyNiN0b2MtMWh0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9hcnRpY2xlL3RvcC85MjYjdG9jLTKqBANJU1CyBQNVU0TqBQdkZXNrdG9w-gUDYW020gYgNEM0ODIxOTM1RTY5RTc5ODRCRDJFQTBDRjc2NTBGQ0OqBwN3ZWLKBxNjdXN0b21tYXBwb3N0ZXIuY29t4AcBgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: global traffic	HTTP traffic detected: GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /hbx/himp?_e=Cv8DIgoya3d5ZmttcnM4MRpXt9UHndc_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_oFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AfkydbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&M=13&cn3=0&c4=native_dom&C=no_res&m=b%3A0&e=&sw=160&sh=870&rr=no_res&rw=160&rh=870&rer=&dr=0&lng=en-US&cv=use2-%2Fc.js HTTP/1.1Host: 1x1.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: global traffic	HTTP traffic detected: GET /tag/?id=146941&user_id=c0c42e7a5092458e842e7a5092558e63 HTTP/1.1Host: bpi.rtactivate.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2t1ZWV6cnRiOjMwMHgyNTA=&v=5&s=v31hud7bado&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjk2ODM0NjIsImwiOjU1Mjg5NjU2NjMsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREkuRiIsInkiOjAsImNvIjowLCJzIjoibW10LTQzNDFlYjhhLWNhZGEtNGQwYS05ZmMxLWZlMGZlNjRmNTg1Zl8xXzFfYWQifX0%3D&cb=9592539&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwydDFaV1Y2Y25SaU9qTXdNSGd5TlRBPSIsIndkIjp7ImsuaGJfYmlkZGVyIjoia3VlZXpydGIiLCJrLmhiX3NpemUiOiIzMDB4MjUwIn0sIndyIjo0MH0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_NATIVE_1_2%26ttl%3D720%26uid%3Df2d9136cf53dede7f83ba16171a37fdd%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=TZvXYgcPoPgLT8-WUnBN
Source: global traffic	HTTP traffic detected: GET /hbx/himp?_e=CvoEIgtfMmt3eWZrbXJzODGAgosVNRjiPzoIYXBwbmV4dXNCGDYzN2E1MjZjMWFjNjQyNzQ0ODZmMDhkNEoTY3VzdG9tbWFwcG9zdGVyLmNvbVILYWFzLWU0ZjBjNThqE2N1c3RvbW1hcHBvc3Rlci5jb214AYoBCGQ1N2YyZTAyoAHYBKgBoAHAAe_2C8gBANABA-gBAPIBDzg0ODcxMzAwOTcwOTIzMpECGle31Qed1z-YApYsoQKAgosVNRjiP6kCAAAAAAAAAACyAgxhaXJmcmFuY2UudXO6Agk1MDA3NDA5ODfCAgQyNjQx2gIIMjE4NDAwODDxAgAAAAAAAAAA-QIAAAAAAAAAAJoDJDAwMDA5YWNlLWJmMjctZTBhMC04N2MzLTI1MGVlYWM1NDcwMaIDDlpHbHpjWFZ6TG1OdmJRqAM0wgMBMMoDBDI2NDHgA8iPAeoDI2ExYjlkYzJmNDE0Yy01ZjA2LWYyMTItZDEzNDM4NGQ2NzQ5-QNLQ2hlw5o4QKIEK2h0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9hcnRpY2xlL3RvcC85MjaqBANJU1CCBRI4Mzg1MDkwNzQ5Nzk4ODk0NDiKBQExsgUDVVNEwgUBMsoFBDIxNjfSBQkxMDUxOTk0MDHYBQHgBQDqBQdkZXNrdG9w8gUNMU85UFc4VFRSMlZQQ_oFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AfkydbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&gdpr=0&gpp_sid=&M=13&cn3=0&c4=native_dom&C=no_res&m=b%3A0&e=&sw=160&sh=870&rr=no_res&rw=160&rh=870&rer=&dr=0&lng=en-US&cv=use2-%2Fc.js HTTP/1.1Host: 1x1.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/04/CryptoTab.png HTTP/1.1Host: 149837791.v2.pressablecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2t1ZWV6cnRiOjE2MHg2MDA=&v=5&s=v31hud7b9tm&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjk2ODM0NTYsImwiOjU1Mjg5NjU2NjMsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREkuRiIsInkiOjAsImNvIjowLCJzIjoibW10LTQ4MTQ4MzY2LWI4YjQtNDRkYS04ZTdlLTBiZDNiZDI4ZTlmMF8xXzFfYWQifX0%3D&cb=5956302&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwydDFaV1Y2Y25SaU9qRTJNSGcyTURBPSIsIndkIjp7ImsuaGJfYmlkZGVyIjoia3VlZXpydGIiLCJrLmhiX3NpemUiOiIxNjB4NjAwIn0sIndyIjo0MH0= HTTP/1.1Host: protected-by.clarium.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?uid=ee28081dc141859df3e9c39bf89f63cf&name=AMAZON&url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dadyoulike.com%26id%3D%7BuserId%7D HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /hbx/himp?_e=CoYFIgtfMmt3eWZrbXJzODGbVZ-rrVjiPzoIYXBwbmV4dXNCGDYzN2E1MjZjMWFjNjQyNzQ0ODZmMDhkNEoTY3VzdG9tbWFwcG9zdGVyLmNvbVILYWFzLWU0ZjBjNThqE2N1c3RvbW1hcHBvc3Rlci5jb214AYoBCGQ1N2YyZTAyoAH6AagBrALAAe_2C8gBANABA-gBAPIBDzE2NjA4NzQwNTIwNDAwN5ECoiHjUSrx1z-YAuUsoQKbVZ-rrVjiP6kCAAAAAAAAAACyAhFnZW5lcmFsc2VhcmNoLm5ldLoCCTQ1MDA0MzQ5MMICBTExODgy2gIIMjE4NDAwODDxAgAAAAAAAAAA-QIAAAAAAAAAAJoDJDAwMDA5YWNlLWJmMjctZTBhMC04N2MzLTI1MGVlYWM1NDcwMaIDDlpHbHpjWFZ6TG1OdmJRqAM0wgMBMMoDBTExODgy4APIjwHqAyNkYWI4ZDY3MzNhODgtNzU1NS02YmU0LWY4YWQ3ZGVkZDFjNfkDS0NoZcOaOECiBCtodHRwczovL2N1c3RvbW1hcHBvc3Rlci5jb20vYXJ0aWNsZS90b3AvOTI2qgQDSVNQggUTODc1MzUzMzA1NDI5MTk2NzE0MooFATGyBQNVU0TCBQM0ODDKBQcxMjE1ODc30gUJMTA1MTk5NDAx2AUB4AUA6gUHZGVza3RvcPIFDFE2U0RFUlZLQkRBOPoFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AeT0NbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&gdpr=0&gpp_sid=&M=13&cn3=0&c4=native_dom&C=no_res&m=b%3A0&e=&sw=300&sh=450&rr=no_res&rw=300&rh=450&rer=&dr=0&lng=en-US&cv=use2-%2Fc.js HTTP/1.1Host: 1x1.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=22&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz\|130:3d12ee56-7200-483f-ad58-25321367cbba
Source: global traffic	HTTP traffic detected: GET /ups/58570/occ?uid=179b87ae-9f2f-46eb-82c4-75c95ef3faa4 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; IDSYNC="18z8~2ijl:19cy~2ijl"
Source: global traffic	HTTP traffic detected: GET /visitor/sync?name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=TZvXYgcPoPgLT8-WUnBN&gdpr=0&gdpr_consent=&gdpr=0 HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
Source: global traffic	HTTP traffic detected: GET /hbx/inde?aid=Y3VzdG9tbWFwcG9zdGVyLmNvbQ&b=custommapposter.com&M=13&v=pba0.0-aa2.15.0-ffc8736-0&cv=use2-%2Fc.js&lng=en-US&_e=CoYFIgtfMmt3eWZrbXJzODGbVZ-rrVjiPzoIYXBwbmV4dXNCGDYzN2E1MjZjMWFjNjQyNzQ0ODZmMDhkNEoTY3VzdG9tbWFwcG9zdGVyLmNvbVILYWFzLWU0ZjBjNThqE2N1c3RvbW1hcHBvc3Rlci5jb214AYoBCGQ1N2YyZTAyoAH6AagBrALAAe_2C8gBANABA-gBAPIBDzE2NjA4NzQwNTIwNDAwN5ECoiHjUSrx1z-YAuUsoQKbVZ-rrVjiP6kCAAAAAAAAAACyAhFnZW5lcmFsc2VhcmNoLm5ldLoCCTQ1MDA0MzQ5MMICBTExODgy2gIIMjE4NDAwODDxAgAAAAAAAAAA-QIAAAAAAAAAAJoDJDAwMDA5YWNlLWJmMjctZTBhMC04N2MzLTI1MGVlYWM1NDcwMaIDDlpHbHpjWFZ6TG1OdmJRqAM0wgMBMMoDBTExODgy4APIjwHqAyNkYWI4ZDY3MzNhODgtNzU1NS02YmU0LWY4YWQ3ZGVkZDFjNfkDS0NoZcOaOECiBCtodHRwczovL2N1c3RvbW1hcHBvc3Rlci5jb20vYXJ0aWNsZS90b3AvOTI2qgQDSVNQggUTODc1MzUzMzA1NDI5MTk2NzE0MooFATGyBQNVU0TCBQM0ODDKBQcxMjE1ODc30gUJMTA1MTk5NDAx2AUB4AUA6gUHZGVza3RvcPIFDFE2U0RFUlZLQkRBOPoFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AeT0NbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&gdpr=0&gpp_sid=&C=no_res&m=b%3A0&e=&sw=300&sh=450&rr=no_res&rw=300&rh=450&rer=&dr=0&eid=1f1eyd38gf21of3cfj&ts=1716283354378 HTTP/1.1Host: 1x1.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=k2j3gqp&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; TDCPM=CAEYASABKAIyCwjK2JjExuD8PBAFOAFaB2YwdjM1ZXdgAg..
Source: global traffic	HTTP traffic detected: GET /bping.php?vgd_len=2772&&vgd_cdv=1233&vgd_cage=0&vgd_tsce=L506&vgd_mcf=76464&gdpr=0&mspa=0&wshp=0&prid=8PRVCXX19&cid=8CU566D6F&crid=825350222&vi=1716283355410027155&ugd=4&lf=6&cc=US&sc=NJ&vsid=3592849466404713&lper=100&wsip=170785092&r=1716283354983&rrr=tzR-hLcl-L-pgrSUQEHlWKlhFVHT_7Sms8nRFgPS-pV-VbyHGus50MPWlIHRoMIV&requrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&vgde_bdata=QOfvzxjj~8xLjMjvf9~e8fXvfF~myJLEYv9.ih~OmYMGv9.AF~QNOvz5~L1Jv9%2C9%2Cou~OmYMjvf9~ejfLMQOvf9fH9Xfu9f~8xLjMGvih9.FA~xLjM7UNv9~xLjMLf1MGv9~Q7OvfuWH99W9~L17v9.999%2C9~8Eviwp4k~kGGv9~L88Ex1v9%2C9~LNvF%2CAfXH~Y78Ov0a9999fX~L8Qx8Ov9%2C9~LEQMQOvf9fH9Xfu9H~L1Oev9.999%2C9~xLjMGvu.9A~ejfLMxLjMGv9~QYYMBLvF.9ffA~xLjMjvf9~QjevFu.9X~yN17vX9uH9f~OGQ8Ov0r9u9~GGvuAX~QYYMYxjv9.hA~JLEYv9.ih~ejfLMxLjMUNv949~EQ8MNvXiFf99~GYvu~LUJv9%2C9%2Cou~1AEMGvfu.ii%2CiH.Wu~QOv9~LMBLMGvHWF.FH%2C9~x8OvAAiidcf3quLsPBVQbl~NejfLMGvXh.WF~G7OvXAf9iWH9fWF9uWFFhfAXuWuXAWuiXfWhHfAX9hX9uWXAXWA9XAAAFAWfFuAuhhXFf9AuhffuXfW9FH9fA9hWXHWhWfHuAfuhFWWH9FXfAi9H~x8Yv9~LU7v9.999%2C9~1EEMzvzmzM1EE~eLMxLjMGvhfH.ii~myOfEMGv9.ii~GxyOvH~QQvIK~NNvPb~UGMOjvJz~x8Bvou~NJv9~LNevuu.WA~%3DVvAuFH~UGMxNvu~QlvX99~z7Qvu~UGMxjvJz~UGMNNUQvu~N7vzJBn5mLU~GO7vuhuFfWAAXf~UGM77v9~ONvW~ejfLMGvfu.ii~77vAXhfh~NLEYvu.Af~xjYMEv9.9A~eBMJ-Nv9.XF~QYYMG8Ov9.hu~e8QMQOvX9F~xLjMLEQMGvW.iX~QmGdv9.HX~ONfvu~eM1QzvAAXF~c0v.Y1E.~j1Q7v~NemyvXh.WF~e8QMxLjMGv9.hf~ejfLM8MQOvf9fH9Xfu9f~e8QMxLjMjvA9~UNfXv9~J7vuA~ejfLM8MGv9.9X~LJkMLvXOh~e8QMGvXXi.uF~ejfLMxLjMe8vu4ouF~xLjM7e8vF9~JNEMJJLvF.Xu~eev9~NejfLMQOvX9F~LkevF.Wf~jfLMGvu999~BLMGvf9.Wh%2C9~QYYMQOvf9fH9Xfu9f~L1OEv9.999%2C9~Q8OvWfXAX9fff~xLjMLEQMUNv9~UGMQLNvUGG~eBxv9.XF~OfEMjvu9~NejfvXh.WF~AENkvWAH.H~OYYMQ7LyvQYYMY8yL178mzM7JQ7~OfEMGv9.ii~GMlvu9uuW~LEQMGviH.Wu~xLjMQLEQMGvW.iF~LUBEv9.999%2C9~c0fv.Y1E.~J-EQNmLJvou~EGv9.Ff~LUBOv9.999%2C9~8QDJkv9~0sv9~8Q8kv9~xLjMLENMGv9~G8Ov9.hu~UGME7vKL78NjJ~xLjMLEQMLev9~NGOEv9.hu9~875EJM8Ovfu~QJjjJLM71yM8OvfuWH99W9~QxEEj5M71yM8OvfuWH99W9~e8JB1G8j875v9.XXWhhH~EmQvu~N1LL8JLVOv9~myG8Ov9.ih9999~GkjLv9.9HX~Qx8OvfhWFHAfh9HfHXHWuhfF~O7NvBJQ7MmL~OYYMJLEYvk1jQJ~OYYvQYYMY8yL178mzM7JQ7~GOEN1EOv9~O1jyvQYY~QyY7vjmzyM718jMGkM1EEjJM7JNw~8zQjv9~QmGEv~w7Yjvu~QYYM1E8veu~8GNvu~zQlvu~7yQvA99-fX9~GQ1v%2Fu~GQGvA~GQEvf~7Y-vWh~Y-GU7v9&ssld=%7B%22QQ8E%22%3A%22W.HF.ufA.uhX%22%2C%22QQNN%22%3A%22Pb%22%2C%22QQQN%22%3A%22I3%22%2C%22QQN75%22%3A%22IJBn3mLU%22%7D&vgd_bid=354743&vgd_ydspr=1&vgd_sbSup=1&vgd_is_amp=0&vgd_asn=3356&vgd_rakh=1716283355196438332&vgd_l1rhst=contextual.media.net&vgd_rpth=%2Fnmedianet.js&vgd_hb_audit_1=8CUH868Z4&vgd_hb_audit_2=784888595&vgd_pgid=p01218725535t202405210922&vgd_pgids=3&vgd_wshp=0&vgd_uspa=0&hvsid=00001716283354979001372640479604&gdpr=0&mspa=0&wshp=0&vgd_l2type=scs_newfl&vgd_end=1 HTTP/1.1Host: lg3.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: d3div1mtym39ic.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10084465274176&gdpr=0&consent=&us_privacy= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPU0580edc5dbac4778bfc19398f495dfb8
Source: global traffic	HTTP traffic detected: GET /clog?logid=awlog&pixel_len_bucket=7400&lper=1&itypeid=21&itype=APPNEXUS_EXPERIMENT&itype_override=APPNEXUS_EXPERIMENT&cc=US&cid=8CUH868Z4&reqid=556775042280754369&vid=556775042280754369&dn=custommapposter.com&rawDn=custommapposter.com&requrl_dn=custommapposter.com&pid=8PR113JGC&ugd=4&fleet=common-32c&requrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&cliIPType=v4&coppa_status=N&coppa_applied=N&coppa_enf=true&lmt_enf=true&dnt_status=N&dnt_enf=false&geo_source=2&sc=NY&ct=New+York&zip=10118&pubid=pub-appnexus-exp&tgtval=pub-appnexus-exp&csip=rtb-common-32c-7d7b858d67-xjvlm.OR&dtc=west_or&zone=b&ptype=23&tmax=150&xtmax=120&gdpr=0&gpp_present=false&app=0&sat=1&devbrand=Unknown&devmodel=Unknown&device_id=4&ortb_device_id=2&asn=3356&gender=O&sckfl=1&suid=2786432704245481726&sckfl2=0&smbrid=12290&cxtSgmt=long_tail_bf_apple_tech&usp_status=0&usp_enf=1&mspa_enforced=true&pexid=APPNEXUS_EXPERIMENT-1886142&geoll=true&is_ortb=true&s_ip=104.254.151.0&s_city=los+angeles&commit_id=4d581d0a&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-05-20+00%3A00%3A00&schain_cmpl=1&schain_nodes_count=2&dummy_vsid=false&second_call=false&supply_cc=US&ipcc=US&is_msnnative_src=false&proxy=g-usw1b-rtb-common-envoy-7&header_lang=false&homepage=false&imp_count=1&tgt_imp_count=1&audit=1&rtttime=25&req_tid_present=true&pvid=460&prvAccId=825350222&prvApiId=8CU566D6F&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=784888595&prspt=headerBid&prvReqId=76114979204979_1376122103_7848885954601_0&size=300x250&chnl=smm_migration_test&bdp=0.970000&bid_uuid=1901c1c7d343818e307cdc5479a8a2f8&cbdp=0.710000&og_cbdp=0.970000&ogbdp=0.97&pv_adtype=0&res_mtype=0&mnet_ckfl=0&ckfl=0&be=0&advUrl=https%3A%2F%2Fgeneralsearch.net&dfpBd=0.71&mowxReqId=2ee4578d0687174759c19d9281bba47b_1&dsrc=-2&dp=0&dbf=1&epc=825350222&s=1&snm=SUCCESS&adj_ttl=600&pcrid=8CU566D6F-825350222-21-7&tpbTkn=false&exid=218&bidflr=0.045&pbidflr=0.045&basebidflr=0.045&opbidflr=0.045&spbf=0&viewability=56&sbdrid=135&exp=ssProfile%3D0%7Csfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Csch%3D1%7Cclt%3D3%7Ctpi%3D1%7Cfl_rl%3D1%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100%7Ctpi%3D1&mnrf=0&ortbseat=BID_API&brsrclk=0&bidrestime=1716283352987&fpuReq=1&bfs=103&acsn=1&ybnca_erpm=0.97&dmm_erpm=false&dmm_ogerpm=false&bcrid=450043490&strg=smm_migration_test&stagid=21840080&pgcatiab2=635&vls=0&scrid=450043490&mang=1&pvdTmax=87&fpusp=false&ae=false&epcexp=false&moau=true&ucrid_ver=2&omid=0&mnet_static_share=0.0&dt=O&bdata_len=1791&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=3&spSource=0&spTo=3&spIsReq=3&spFst=0&spCst=0&mx_primaryScData=462.65611754732976&mx_sbp=-10.0&mx_badv_count=17&mx_epbc=8CU566D6F&mx_ssProfile=0&mx_g_uid_source_cvrg%3C%3E=ttdid%23EIDS&mx_sua_os_n=Windows&mx_lr=0&mx_TAS=1&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_bssMetrics=%7B%22AVG_CPM%22%3A%7B%22sc_default%22%3A462.65611754732976%7D%7D&mx_g_uid_cvrg%3C%3E=ttdid&mx_dup_profile=0&mx_bsAlgoBucket=MARK_NOT_BLOCK&mx_g_uid_sent%3C%3E=ttdid&mx_dup_algo=NOT_APPLICABLE&mx_bsVerdictAlgo=V1&mx_se

Source: chromecache_344.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},ek:function(){e=Cb()},ud:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_344.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=kA(a,c,e);O(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return O(122),!0;if(d&&f){for(var m=Mb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},nA=function(){var a=[],b=function(c){return sb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_344.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Zg:d,Xg:e,Yg:f,Mh:g,Nh:h,Ae:m,Ab:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(NC(w,"iframe_api")\|\|NC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!EC&&LC(y[B],n.Ae))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_344.2.dr	String found in binary or memory: var PB=function(a,b,c,d,e){var f=Iz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!g.length)return!0;var h=Nz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if("https://www.facebook.com/tr/"===m)return O(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: jaz.wxk.mybluehost.me
Source: global traffic	DNS traffic detected: DNS query: www.swisspass.ch
Source: global traffic	DNS traffic detected: DNS query: cdn.app.sbb.ch
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: corporatedefenseetl.com
Source: global traffic	DNS traffic detected: DNS query: custommapposter.com
Source: global traffic	DNS traffic detected: DNS query: monu.delivery
Source: global traffic	DNS traffic detected: DNS query: faves.grow.me
Source: global traffic	DNS traffic detected: DNS query: api.grow.me
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.confiant-integrations.net
Source: global traffic	DNS traffic detected: DNS query: static.kueezrtb.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: api.id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: g2.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: s.seedtag.com
Source: global traffic	DNS traffic detected: DNS query: exchange.kueezrtb.com
Source: global traffic	DNS traffic detected: DNS query: rtb.openx.net
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: prebid.media.net
Source: global traffic	DNS traffic detected: DNS query: prebid.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: hb.minutemedia-prebid.com
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: prebid.cootlogix.com
Source: global traffic	DNS traffic detected: DNS query: e.serverbid.com
Source: global traffic	DNS traffic detected: DNS query: apex.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: hb-api.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: btlr.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: imps.monu.delivery
Source: global traffic	DNS traffic detected: DNS query: lb.eu-1-id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: track.kueezrtb.com
Source: global traffic	DNS traffic detected: DNS query: gtrack.kueezrtb.com
Source: global traffic	DNS traffic detected: DNS query: config.aps.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: client.aps.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: live.primis.tech
Source: global traffic	DNS traffic detected: DNS query: u.kueezrtb.com
Source: global traffic	DNS traffic detected: DNS query: app.grow.me
Source: global traffic	DNS traffic detected: DNS query: some.growplow.events
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: aax.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: sync.serverbid.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: sync.kueezrtb.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: sync.cootlogix.com
Source: global traffic	DNS traffic detected: DNS query: cs.seedtag.com
Source: global traffic	DNS traffic detected: DNS query: bloggernetwork-d.openx.net
Source: global traffic	DNS traffic detected: DNS query: contextual.media.net
Source: global traffic	DNS traffic detected: DNS query: visitor.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: cdn.id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.uidapi.com
Source: global traffic	DNS traffic detected: DNS query: tlx.3lift.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: sync.richaudience.com
Source: global traffic	DNS traffic detected: DNS query: ad.360yield.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: csync.loopme.me
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: sync.adkernel.com
Source: global traffic	DNS traffic detected: DNS query: ads.us.e-planning.net
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: 1x1.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: qsearch-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: cm.adform.net
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: gw-iad-bid.ymmobi.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: t.adx.opera.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: video.primis.tech
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: api-2-0.spot.im
Source: global traffic	DNS traffic detected: DNS query: gum.aidemsrv.com
Source: global traffic	DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com

Source: unknown

HTTP traffic detected: POST /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveContent-Length: 382sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://custommapposter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://custommapposter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:32 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Tue, 21 May 2024 09:21:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 152Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffAccess-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEADAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-TypeVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Tue, 21 May 2024 09:21:32 GMTserver: envoyvary: accept-encodingx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:33 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Tue, 21 May 2024 09:21:33 GMTserver: envoyvary: accept-encodingx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:33 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:21:33 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:34 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Tue, 21 May 2024 09:21:33 GMTserver: envoyvary: accept-encodingx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:21:34 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:35 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Tue, 21 May 2024 09:21:35 GMTserver: envoyvary: accept-encodingx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:21:39 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Tue, 21 May 2024 09:21:40 GMTserver: envoyvary: accept-encodingx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:21:42 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:21:44 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 21 May 2024 09:21:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 21 May 2024 09:22:12 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 88737fce9bb742e9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Tue, 21 May 2024 09:22:01 GMTcontent-type: text/plain; charset=utf-8content-length: 9connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Tue, 21 May 2024 09:22:08 GMTserver: envoyvary: accept-encodingx-envoy-upstream-service-time: 1connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Tue, 21 May 2024 09:22:09 GMTserver: envoyvary: accept-encodingx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Tue, 21 May 2024 09:22:14 GMTcontent-type: text/plain; charset=utf-8content-length: 9connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Tue, 21 May 2024 09:22:25 GMTContent-Type: text/html; charset=utf-8Content-Length: 152Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffAccess-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEADAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-TypeVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:22:31 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:22:31 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffdate: Tue, 21 May 2024 09:22:32 GMTcontent-length: 9content-type: text/plain; charset=utf-8x-envoy-upstream-service-time: 0server: ayl-lb-fra02connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Tue, 21 May 2024 09:22:37 GMTcontent-type: text/plain; charset=utf-8content-length: 9connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:22:42 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:22:43 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:22:44 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:11 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:12 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:12 GMTServer: nginx/1.21.6Content-Type: text/html; charset=iso-8859-1Content-Length: 315host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:13 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 21 May 2024 09:21:13 GMTServer: nginx/1.21.6Content-Type: text/html; charset=UTF-8Content-Length: 1228Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-store, no-cache, must-revalidateVary: Accept-EncodingContent-Encoding: gziphost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 52 6b 6f db 36 14 fd 1c ff 0a 56 c5 fa 61 18 25 27 6d 87 c1 91 1d 74 dd b0 0d d8 a3 40 36 04 fb 14 50 e2 b5 c5 98 af 91 94 65 65 e8 7f df a5 44 29 4e 1f 03 da 0a 06 2c dd e7 b9 e7 9c f2 c9 0f 7f bc fe f3 ef 37 3f 92 26 28 b9 59 94 f1 8f 48 a6 77 eb 0c 34 fd eb 3a db 2c ce ca 06 18 c7 ff b3 52 41 60 44 33 05 eb ec 20 a0 b3 c6 85 8c d4 46 07 d0 61 9d 75 82 87 66 cd e1 20 6a a0 c3 47 f6 6e 97 33 95 09 fe a4 47 1b a1 39 1c bf 21 da 6c 8d 94 a6 cb 48 31 34 05 11 24 6c 6e 40 d6 46 01 79 a6 38 f3 cd 25 79 6d 94 d0 3b 72 6d 8c 2e 8b b1 24 16 fb da 09 1b 88 77 f5 3a 6b 42 b0 ab a2 b8 63 f7 79 77 dc e7 aa af 64 0b 8d f1 21 57 50 74 96 0a 5d cb 96 83 2f ee f0 f7 4f 0b ae 4f 7f f9 9d cf 36 65 31 ce 1a c7 86 5e 02 09 bd 45 e4 01 8e a1 a8 3d 96 7c 4d fe 5d 10 7c 2a 73 a4 5e dc 23 9e 15 be 3b 0e 8e 62 e8 72 c8 51 65 ee e9 ff 16 74 50 ed 45 f8 68 cd db c5 a2 32 bc 9f 56 b1 7a bf 73 a6 d5 9c d6 46 1a b7 22 5d 23 02 8c a3 52 a4 92 58 34 46 cc 01 dc 16 b9 a4 c7 15 69 04 e7 a0 c7 b8 62 6e 27 f4 8a 2c 87 f9 4f 3b c7 6c 5a c0 a4 d8 69 8a 23 95 5f 91 1a 95 01 37 b6 70 e1 ad 64 fd 8a 6c 25 24 e8 77 ad 0f 62 db d3 a4 e1 e3 7a 94 87 36 20 76 0d c6 cf 97 cb 43 33 ac ca 53 6d da 16 67 61 fa 31 28 d6 06 43 5e 7e 35 06 2d e3 7c e0 64 39 7e 47 f6 e9 00 f2 9d 75 ec 38 3a 6d 45 5e 5c 2c ed 48 dc d6 18 2c 48 bb 52 16 b1 4c a3 8d 17 41 18 1c b4 15 47 e0 97 49 cb 10 8c 9a d7 49 d8 86 89 a6 34 6d 62 ea 43 48 e2 85 55 d0 ef 89 f5 48 94 13 0d 85 62 3b 58 a1 e5 35 4c eb a3 f2 88 d2 1e 89 37 52 f0 47 8d d1 22 0d e3 a6 3b 6d f9 80 0f 5a e7 63 c8 1a f1 01 fd 84 96 42 03 ad a4 99 e6 6e 51 93 e8 3d 44 72 fe c2 1e 4f 82 5d 12 f0 c5 72 e2 23 b6 ce b2 e6 2f 4f 95 a3 c1 d8 c8 ef 34 61 96 ee 5b 3c e6 f9 1c fe 98 82 43 9c 43 6d 1c 1b 55 79 38 31 98 b6 6e 28 ab c7 b8 62 5a d8 56 0e 55 29 ef 98 9e b4 64 52 92 65 7e e1 09 30 9f da 5b 0f 8e 7a 90 50 87 d3 a9 07 70 41 d4 4c 4e 60 94 e0 5c a6 dc c0 26 f5 96 d5 83 3c 9d 63 76 54 d7 07 16 5a 4f 15 78 8f d2 25 a1 67 6e c7 e1 6f cb c2 87 5e c2 66 71 16 9f 12 49 db 13 07 72 9d 0d 61 df 00 84 8c 34 0e b6 eb ac 09 c1 ae 8a e2 8e dd e7 dd 71 9f ab be 92 2d 34 c6 87 5c 41 d1 59 5a a3 0c 48 52 61 65 8b 14 fb 62 4a d3 0e 9d 62 1d c2 a0 63 aa 60 de 43 f0 e3 66 5f d4 46 21 f7 d4 1b a3 f3 da fb ab c3 fa 79 7e 8e bc 64 a4 18 60 95 45 03 8c e3 6b 59 19 de c7 50 c9 c5 81 08 be ce e2 b1 d9 58 a4 98 d0 a4 96 38 7a 9d 25 24 59 ba ea 2c 75 a4 ac 6f 2b 5f 3b 61 a3 08 b7 9d e0 3b 98 2b cb e6 7c f3 7a 80 43 ae 11 ce 13 5c 7d 3e a7 2e 36 af c8 ef d0 91 1b 3c e7 4d 3c 87 5c 23 f3 58 72 91 4a 48 5a 57 da 07 20 71 56 bc ec 36 32 eb b3 4d c9 4e d8 f4 48 67 d7 75 f9 4c 24 d6 23 6d 66 57 34 a6

Source: chromecache_368.2.dr	String found in binary or memory: http://caniuse.com/
Source: chromecache_258.2.dr	String found in binary or memory: http://contently.github.io/xdomain-cookies/)
Source: chromecache_272.2.dr, chromecache_330.2.dr	String found in binary or memory: http://creativecommons.org/ns#
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: http://custommapposter.com?page=2
Source: chromecache_368.2.dr	String found in binary or memory: http://dillerdesign.com/experiment/DD_BelatedPNG
Source: chromecache_272.2.dr, chromecache_330.2.dr	String found in binary or memory: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
Source: chromecache_595.2.dr, chromecache_452.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_595.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_272.2.dr, chromecache_330.2.dr	String found in binary or memory: http://www.inkscape.org/namespaces/inkscape
Source: chromecache_505.2.dr	String found in binary or memory: https://149837791.v2.pressablecdn.com/wp-content/uploads/2022/04/CryptoTab.png
Source: chromecache_550.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-Bees
Source: chromecache_510.2.dr, chromecache_223.2.dr, chromecache_605.2.dr, chromecache_293.2.dr, chromecache_428.2.dr, chromecache_412.2.dr, chromecache_335.2.dr, chromecache_576.2.dr, chromecache_259.2.dr, chromecache_430.2.dr, chromecache_361.2.dr, chromecache_241.2.dr, chromecache_235.2.dr, chromecache_271.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baid
Source: chromecache_463.2.dr, chromecache_415.2.dr, chromecache_439.2.dr, chromecache_522.2.dr, chromecache_369.2.dr, chromecache_443.2.dr, chromecache_441.2.dr, chromecache_484.2.dr, chromecache_578.2.dr, chromecache_564.2.dr, chromecache_409.2.dr, chromecache_224.2.dr, chromecache_464.2.dr, chromecache_459.2.dr, chromecache_359.2.dr, chromecache_451.2.dr, chromecache_275.2.dr, chromecache_591.2.dr, chromecache_549.2.dr, chromecache_455.2.dr, chromecache_545.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_
Source: chromecache_268.2.dr, chromecache_367.2.dr, chromecache_499.2.dr, chromecache_226.2.dr, chromecache_535.2.dr, chromecache_356.2.dr, chromecache_398.2.dr, chromecache_360.2.dr, chromecache_577.2.dr, chromecache_418.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx
Source: chromecache_494.2.dr, chromecache_311.2.dr, chromecache_261.2.dr, chromecache_402.2.dr, chromecache_392.2.dr, chromecache_399.2.dr, chromecache_516.2.dr, chromecache_588.2.dr, chromecache_285.2.dr, chromecache_305.2.dr, chromecache_306.2.dr, chromecache_310.2.dr, chromecache_298.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMed
Source: chromecache_413.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=$
Source: chromecache_413.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=$
Source: chromecache_437.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?is=kueez&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fs
Source: chromecache_345.2.dr, chromecache_314.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_344.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_344.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_456.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?&gdpr=
Source: chromecache_413.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=$
Source: chromecache_505.2.dr	String found in binary or memory: https://api.cryptoguiding.com/v1/rss
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://api.custommapposter.com/v1/rss
Source: chromecache_526.2.dr	String found in binary or memory: https://api.grow.me
Source: chromecache_283.2.dr, chromecache_585.2.dr	String found in binary or memory: https://api.id5-sync.com/analytics/event
Source: chromecache_227.2.dr	String found in binary or memory: https://api.intentiq.com
Source: chromecache_469.2.dr	String found in binary or memory: https://api.rlcdn.com/api/identity/envelope?pid=
Source: chromecache_505.2.dr	String found in binary or memory: https://apps.apple.com/us/app/cryptotab-browser-mobile/id1446766940
Source: chromecache_456.2.dr	String found in binary or memory: https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US
Source: chromecache_506.2.dr	String found in binary or memory: https://assets.adobedtm.com/15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.js
Source: chromecache_413.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562763&ev=1&rurl=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Ft
Source: chromecache_358.2.dr, chromecache_440.2.dr	String found in binary or memory: https://btloader.com/tag?aax_id=
Source: chromecache_231.2.dr	String found in binary or memory: https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1
Source: chromecache_587.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&
Source: chromecache_344.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_432.2.dr	String found in binary or memory: https://cdn-ima.33across.com/ima.js
Source: chromecache_432.2.dr	String found in binary or memory: https://cdn-ima.33across.com/ppid.js
Source: chromecache_289.2.dr	String found in binary or memory: https://cdn.adnxs-simple.com/js/anjam.js
Source: chromecache_413.2.dr	String found in binary or memory: https://cdn.adswizz.com/adswizz/js/SynchroClient2.js
Source: chromecache_417.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_520.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_520.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_520.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_520.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_504.2.dr	String found in binary or memory: https://cdn.integ.uidapi.com/
Source: chromecache_469.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/prebid/currency-file
Source: chromecache_469.2.dr	String found in binary or memory: https://cdn.undertone.com/js/usersync.html
Source: chromecache_456.2.dr	String found in binary or memory: https://cm.adform.net/cookie?&gdpr=
Source: chromecache_231.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=casale&AG_SETCOOKIE
Source: chromecache_587.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_231.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZkxnuNHM6HMAAHezAHb-
Source: chromecache_397.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_520.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_397.2.dr	String found in binary or memory: https://cs.admanmedia.com/e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartad
Source: chromecache_437.2.dr	String found in binary or memory: https://cs.media.net/cksync?cs=45&type=ku&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.kueezrtb.
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/13-best-ethereum-mining-software-app-eth-miner-2023/926
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/best-cryptocurrency-mining-apps-for-ipad/926
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/best-earn-bitcoin-apps-for-android-in-2023/926
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/can-you-mine-bitcoin-on-an-iphone-yes-you-can-but-the-payout-is-
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/can-you-mine-crypto-on-an-iphone/926
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/can-you-mine-crypto-on-apple-m1-or-m2-silicon/926
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/choosing-the-best-and-safest-dog-food-for-your-pet/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/choosing-what-dog-food-is-best-for-your-dog/947
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/experian-review-is-it-the-best-way-to-check-your-credit-score-mo
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/find-the-model-number-of-your-iphone-ipad-or-ipod-touch-apple-su
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/how-does-btcs-satoshi-app-mining-work/926
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/how-to-teach-your-dog-to-be-obedient/947
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/largest-public-bitcoin-mining-companies/926
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/macbook-pro-cryptocurrency-mining-profitable-but-only-just-9to5m
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/mining-ethereum-using-macbook-m1-it-turns-out-you-can/926
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/my-dog-has-arthritis-what-can-i-give-him/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/my-dog-survived-parvo-now-what/947
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/new-macbook-pros-insanely-efficient-at-crypto-mining-but-isn-t-w
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/scooby-doo-what-kind-of-dog-is-scooby-doo/947
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/the-time-it-takes-to-train-for-a-10k-and-your-fitness-level/926
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/top-10-cutest-dog-breeds/947
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/top/926
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/venmo-international/926
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-age-is-a-dog-a-senior/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-breed-is-my-dog/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-breed-of-dog-is-scooby-doo/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-breed-of-dog-is-the-smartest/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-can-i-feed-my-dog-with-pancreatitis/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-can-you-give-a-dog-for-vomiting-and-diarrhea/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-da-dog-doin-sound-effect/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-da-dog-doin/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-does-a-dog-tick-look-like/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-does-it-mean-when-my-dog-winks-at-me/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-does-it-mean-when-your-dog-winks-at-you/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-does-the-dog-say/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-dog-food-is-best-for-picky-eaters/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-dog-food-is-most-recommended-by-veterinarians/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-dog-food-is-recommended-by-vets/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-dog-looks-like-a-bear/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-food-can-a-dog-eat/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-food-can-i-give-my-dog-for-itchy-skin/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-gear-do-i-need-for-camping-with-a-dog/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-happens-if-a-dog-eats-chocolate/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-happens-if-your-dog-bites-someone/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-happens-to-microchip-when-dog-dies/947
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/article/what-happens-to-your-cryptos-when-the-internet-goes-down/926
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-a-dog/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-a-female-dog-called/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-best-dog-food-for-senior-dogs/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-better-dry-or-wet-dog-food/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-chicken-meal-in-dog-food/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-dog-day/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-it-called-when-a-dog-stretches-their-chest/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-meat-meal-in-dog-food/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-canned-dog-food-for-senior-dogs/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food-for-american-bulldogs/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food-for-food-allergies/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food-for-great-danes/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food-for-kidney-disease/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food-for-medium-sized-dogs/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food-for-sensitive-skin/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food-for-small-senior-dogs/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dog-food/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dry-dog-food-for-senior-dogs/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dry-dog-food-for-sensitive-stomachs/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dry-dog-food-for-small-breeds/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-dry-dog-food/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-raw-dog-food-in-the-uk/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-soft-dog-food/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-soft-dry-dog-food/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-best-wet-dog-food-for-small-dogs/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-difference-between-dog-shampoo-and-human-shampoo/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-dog-days-of-summer/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-dog-doing/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-dumbest-dog-breed/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-grinch-s-dog-called/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-most-aggressive-dog-breed/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-smartest-breed-of-dog/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-is-the-tallest-species-of-dog/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-kind-of-dog-am-i/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-kind-of-dog-do-i-have/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-kind-of-dog-food-is-best-for-your-dog/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-kind-of-dog-is-this/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-kind-of-dog-is-your-dog/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-questions-to-ask-a-dog-breeder/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-size-crate-for-50-lb-dog/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-size-crate-for-a-dog/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-sound-does-a-dog-make/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-sound-does-the-dog-make/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-the-dog-doin-sound-effect/947
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-the-dog-doin/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-the-dog-doing-sound-effect/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-the-prob-dog-is-doing/947
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-ask-when-buying-a-dog/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-do-for-dog-upset-stomach/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-do-if-the-dog-doesn-t-come-home/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-do-if-the-dog-doesn-t-like-you/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-do-when-a-dog-that-bites-their-owner/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-do-when-buying-a-dog/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-expect-with-an-aging-dog/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-feed-a-dog-with-allergies/947
Source: chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-feed-dog-with-an-upset-stomach/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-give-a-dog-for-diarrhea/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-know-when-adopting-a-dog/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-to-put-on-dry-dog-food/947
Source: chromecache_495.2.dr	String found in binary or memory: https://custommapposter.com/article/what-type-of-dog-is-good-for-apartment-living/947
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ii9GUGJtQjJqNWx6R0t0b1ZiTExxRGc9PSIsInZhbHVlIjoieDJL
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ii9MUVZsdFpwYThLUWI1cmtSVkxsWlE9PSIsInZhbHVlIjoieHkv
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IitocVd4bklRWmZwYVZRRXlreHI4RkE9PSIsInZhbHVlIjoiQUdv
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjA1Q2Zzb2NYS2s4aWs5dm5ZOW5XQ0E9PSIsInZhbHVlIjoiR0hO
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjAyMGFoU290QTVlcFI1QXljVzVzaFE9PSIsInZhbHVlIjoiaTQ5
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjBYVW9vcmw5dDJ2TFRkazdnQUk0Snc9PSIsInZhbHVlIjoibzhY
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjF6TXRJeEtEcGQ1SGdaQ2txdGs0RFE9PSIsInZhbHVlIjoieG9D
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjJhUXc1RURmOGdPTDVSQWlPYVhFdUE9PSIsInZhbHVlIjoiWG1x
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjJlRGxKZXYxMUwrcUI5SHl0VGpyZGc9PSIsInZhbHVlIjoiY3B0
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjMrT3VYYVY3NllhUW5KaTZkSThiTUE9PSIsInZhbHVlIjoiL1lB
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjNQMkh1QWY5RWVFMEpBNzhRamJCR3c9PSIsInZhbHVlIjoiaENa
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjNUbDNSRTMrM2szRnUxNVVRQlk5K0E9PSIsInZhbHVlIjoia1or
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjQvUGZWUWdBSDZwNldkL3hFMmxIWFE9PSIsInZhbHVlIjoicEN0
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjRBWC9Yb0tGaVhic016c1R5R2wxUXc9PSIsInZhbHVlIjoiZmkv
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjVqZ1UxalhpeitjNHhEVU45aDZWc0E9PSIsInZhbHVlIjoiR29F
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjZ6WXNJK2E5dEduYkNsaWM1YUZVVXc9PSIsInZhbHVlIjoieTBs
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjcvUDZqNVZwWTF1Smg2eXd2YmFKZXc9PSIsInZhbHVlIjoiNmsr
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjcwZWJVK21wNlhoMzRmdnc5YXdkMXc9PSIsInZhbHVlIjoiTDhY
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ijh4N25MZWFLM01keE51amt6VU5JdkE9PSIsInZhbHVlIjoiSWJa
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjhLb1ZmZGdsUDRHeTNoKzFNbVRlMGc9PSIsInZhbHVlIjoiL0Na
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjhPSkdZQkJEM3pjU0txbm5nTGtMM2c9PSIsInZhbHVlIjoiTmZ6
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjkzbU50d3Rmbmljbi9QWmZYZ3hHcXc9PSIsInZhbHVlIjoiVnhL
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IjlxQ1RCU1VQZXgvbjlRYjJ2dkpYc2c9PSIsInZhbHVlIjoieE53
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ik1LN2JHVVRBN1pQOHJtNi9WT1RaM0E9PSIsInZhbHVlIjoidWRa
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ik5xbEVKM05admlLUUFFcUQvMG5EMVE9PSIsInZhbHVlIjoicnJ0
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkExREdBMzhucldWTDVSUGczVmlVcGc9PSIsInZhbHVlIjoibWZl
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkFjNFFkdjR3VjdLUThTWm5iTGVOYXc9PSIsInZhbHVlIjoiMG94
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkFoTVM3MXkvbGJKUGFCSWFxK0c4MHc9PSIsInZhbHVlIjoiNEJr
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkN3S3Q1UVVwRExMaEk3ekxmaWE2TWc9PSIsInZhbHVlIjoibnRz
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkRCeFBIMVFOQkRCejE4ZE9UWkxBaUE9PSIsInZhbHVlIjoieWlR
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkVpT2dGbldGVk0wRXhJc05oZ2dGRFE9PSIsInZhbHVlIjoiQ2VL
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkVqU0pGaUNIeDZtVFZTVVVqT0YwaWc9PSIsInZhbHVlIjoiVHIz
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkVsWVFZdUpockR3VHRCNkRxb3VKSlE9PSIsInZhbHVlIjoiUko3
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkZUNE9WNHluTThlMkVJRVB1Vi9LTkE9PSIsInZhbHVlIjoiMS85
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkZXYXVibDlyVi9sV2RHTktPYUJvd1E9PSIsInZhbHVlIjoidy9p
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkhIMkpsTEV2WUoyN3RYWjZOL0t2TFE9PSIsInZhbHVlIjoiK1dy
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkhkK1hFSkFqQUlkQ0xrYUs2VWJiNUE9PSIsInZhbHVlIjoiL0ZR
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ikk5cUtsc3ZlUDhCN1NjUlRiUHRnNVE9PSIsInZhbHVlIjoiR1hl
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IklGVmc0c0czQ21zOTZFRlR2RENpblE9PSIsInZhbHVlIjoicXhI
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IklKbFd1cURVODlNeDdBT2hlRzh6YXc9PSIsInZhbHVlIjoiNkFi
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IklRRzhuZHRmSzdranJOYXk5R2UrQ0E9PSIsInZhbHVlIjoiQVJt
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IklobjFRMXpMTHhnZmFYT0F2bUlzZlE9PSIsInZhbHVlIjoiNFVy
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ikt6aUxoYzFKaGgvMGtOWTFnUG1DVGc9PSIsInZhbHVlIjoidFVk
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IktDV3VTTmw4STIxQkRKYllKM2U3d2c9PSIsInZhbHVlIjoidnJq
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IktueUdFVnF2N3d4NktYRFlvS21BQVE9PSIsInZhbHVlIjoicXNw
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkxSQStpRU5MbDJGckJSWGpVak1ZY0E9PSIsInZhbHVlIjoiN2ZL
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IkxzS2JySWRUbVpDbXVhelpLcUdjNkE9PSIsInZhbHVlIjoiYTUx
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlBIRDJ5VjRyZzZKNXJaMWtMUGlEcEE9PSIsInZhbHVlIjoidWhC
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlI1eWR4RXF5Y01KQjJlUmVIbXFEVmc9PSIsInZhbHVlIjoiZlFa
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlI2OHNickhUcE5ZWnU5ZGpsNVNSL2c9PSIsInZhbHVlIjoiZldr
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlM5VWx5L3VZK1hlVDNOc1FYK3BQNmc9PSIsInZhbHVlIjoiS3k1
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlNOMW9GTk5nL1RQM1JPZmRVNXYvaUE9PSIsInZhbHVlIjoiT0VQ
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlRiZWdISmxnNkl1d1BQbUtVakxCWXc9PSIsInZhbHVlIjoiTVht
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlVPOEdtYXdmZzgrQWpWc1ZFUTZJK3c9PSIsInZhbHVlIjoiS2Zh
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlVQcElhbkwwTkJlemRrVjVVRmVZMlE9PSIsInZhbHVlIjoieHdv
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlZTakpLYW1vS2JwMGRrV0E3TmFBL1E9PSIsInZhbHVlIjoiRS9Q
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IldJUDIzMS8vVG5ML2lTc0ZlanBpbXc9PSIsInZhbHVlIjoiRjVZ
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlkvWm5obnM5VDhMdzhFQk1LZzJZWmc9PSIsInZhbHVlIjoiSmQ4
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IllNNFl1UHg2VTFqK2dXWklnRmhLUHc9PSIsInZhbHVlIjoiTjdQ
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ilo3VndpU0dqRGVVeGdLenhmKzM4aHc9PSIsInZhbHVlIjoiYnNU
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IlpYNzUyRHlnWnVBQnk2YXJqSlgwL3c9PSIsInZhbHVlIjoiN3NJ
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Im1BVGZXSEJNRldQNjNvSjVJcmRCWnc9PSIsInZhbHVlIjoiVlUw
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Im4vQ0JDZjVLbmI0M3B6bVgzbUUvK3c9PSIsInZhbHVlIjoiRHRk
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Im52clR1VkZjT0ZSQ1RNWWxtT21rZkE9PSIsInZhbHVlIjoiSHFl
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Im9PdjNMeC9SbTNJRU14amxIa0ZmREE9PSIsInZhbHVlIjoiSUg4
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImE5UFBXbVl0UGtINlNkRnA5aUxFQnc9PSIsInZhbHVlIjoiRGh1
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImFYMjBEclN6S3lhUTAwQy95SUhQbnc9PSIsInZhbHVlIjoiUXpy
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImJDY3RILytiWlJkcWs0RlY0dWo0c0E9PSIsInZhbHVlIjoiRGZv
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImNVaGFmVDdqRHd0RVZha1pQVUdnVkE9PSIsInZhbHVlIjoiUU5L
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImQ2RVJYVEtjNE1tWE1Wc1VxTTlOVXc9PSIsInZhbHVlIjoiM1Ro
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImR4WGxiamo2cHo4Q0duS0RRcEpJSnc9PSIsInZhbHVlIjoiWjU4
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImRERlRrc2xOTjhaNUdNY1FMZW9IbHc9PSIsInZhbHVlIjoiMGN0
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImdhdlBodGt2R3B2Z2EvcUE2WHRCU2c9PSIsInZhbHVlIjoiZW5I
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Imdodm5pdnBsc0JWYS9EOUJpajFLRmc9PSIsInZhbHVlIjoidWZ5
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImhiQU9lb3QvaUxPdTJ5ekFROWpxd3c9PSIsInZhbHVlIjoiR0hM
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImlBdkF6T2tGenEwV3hxWnlhQWtuMGc9PSIsInZhbHVlIjoicGpR
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Imp6K2Rpb2ZqODB1MGFQTmh6RUZudVE9PSIsInZhbHVlIjoibEth
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImpXcWVXdWVPT1RMeHVycXlEaUVndkE9PSIsInZhbHVlIjoiZlE5
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6ImswekFGTFBqY0EvaTVScXl5Sm95NEE9PSIsInZhbHVlIjoiZW04
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Imw2anp0dlg5QVNBUEs0RUZIUmJ6RkE9PSIsInZhbHVlIjoiUjJs
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InAxazE2KzQyT3hCUTF4YXlWMHZoVWc9PSIsInZhbHVlIjoieE8x
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InAycUlabFZFMURnSjdQZjk0NlFhSXc9PSIsInZhbHVlIjoibTFh
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InBFbldQNXl0RitTUWZwL0xkSjRzQXc9PSIsInZhbHVlIjoicjRJ
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InBrbktaMXVhU1JpYVJtTXBDQzVjbGc9PSIsInZhbHVlIjoibUtD
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InBsNVBOSlluUWVicU9HQy9IdWt6UUE9PSIsInZhbHVlIjoiWi8x
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InE1WnlIQ200ZmNjWlRUNVJMQ1JGZWc9PSIsInZhbHVlIjoiVkJW
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InFUb1dzT3VWeC94OVdaVDdZODk3dlE9PSIsInZhbHVlIjoibFlw
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InJ4TSt0R3U0TVhYN25XUk1jZk9yb2c9PSIsInZhbHVlIjoiZHNW
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InJRWGM3b3M5b0Vaa2RYQjJHRC8vamc9PSIsInZhbHVlIjoiMmQ1
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InJSS3RDRlpON3F4dXZKUG9RWXNUSnc9PSIsInZhbHVlIjoiNWhP
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InRiS1pHSytDSnlpbDV5YnBUTy9acnc9PSIsInZhbHVlIjoieitP
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InVVRVRLREQ4bkRzSUZjTFVDN3RYTEE9PSIsInZhbHVlIjoidHZZ
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InYyVkxqK1JoK0NRZU5lTllEbWZ4bXc9PSIsInZhbHVlIjoiaVJD
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ind0YWdZb1RXV3Z3Vzc5MlV0SG1hOXc9PSIsInZhbHVlIjoiaXM5
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ind0YjhCQ1ZKWDhvdXFaa3hHeWN0MFE9PSIsInZhbHVlIjoiZDBa
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IndBYlovY2pjQk9Wd1lkd05FNmlDU1E9PSIsInZhbHVlIjoibTRU
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IndvVWM5MTRsbkhVeVZYQnBkZ2d0aWc9PSIsInZhbHVlIjoibkcr
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ing0WTFkUjRkS0xlbFM4eVBTcG8xUUE9PSIsInZhbHVlIjoiWTIw
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6IngyTGJlZ0pzYjZ2aVVvQnFkdzN5REE9PSIsInZhbHVlIjoiWUk4
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Inh2dEN4MVJLNFV1NWszb2dxZTNaRVE9PSIsInZhbHVlIjoiR3Fr
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InhGREZIcmxiZjBtUWpEbzl0NVBibWc9PSIsInZhbHVlIjoiQXBk
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ink4OCtvU0VYMlNzOGRhdHo2bHpXbVE9PSIsInZhbHVlIjoieWI3
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InlsdFRRODdIcjdac1FJaWpJR2x3N2c9PSIsInZhbHVlIjoiYWV0
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InlwUWVMM0MvVFVsajlaeDhXQTZuQnc9PSIsInZhbHVlIjoiV1Fl
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6Ino5RnRCbFpkUzRUWnJDS1ZWRi9aUmc9PSIsInZhbHVlIjoiNzN3
Source: chromecache_505.2.dr	String found in binary or memory: https://custommapposter.com/goto?target=eyJpdiI6InppYzMzM2tVMlk4czhuam5hc3VpeWc9PSIsInZhbHVlIjoiUWw4
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/page/about-us
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/page/contacts
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/page/cookie-agreement
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/page/disclaimer
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/page/dmca
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/page/privacy-policy
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/page/terms-and-conditions
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/search-article
Source: chromecache_294.2.dr	String found in binary or memory: https://custommapposter.com/static-res/img/newsike/thumbnail.jpg?id=0ddb4da92cd291f13ead
Source: chromecache_432.2.dr	String found in binary or memory: https://d-code.liadm.com/did-004d.min.js
Source: chromecache_417.2.dr	String found in binary or memory: https://d27la2n6wh4qws.cloudfront.net/1.11.276/
Source: chromecache_368.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Guide/HTML/HTML5/HTML5_element_list
Source: chromecache_222.2.dr	String found in binary or memory: https://developers.google.com/open-source/licenses/bsd
Source: chromecache_397.2.dr	String found in binary or memory: https://dsp.adfarm1.adition.com/cookie/?ssp=5&gdpr=0&gdpr_consent=
Source: chromecache_231.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.n
Source: chromecache_417.2.dr	String found in binary or memory: https://eu-api.friendlycaptcha.eu/api/v1/puzzle
Source: chromecache_469.2.dr	String found in binary or memory: https://fast.nexx360.io/cache
Source: chromecache_469.2.dr	String found in binary or memory: https://fast.nexx360.io/prebid
Source: chromecache_469.2.dr	String found in binary or memory: https://fast.nexx360.io/track-imp
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://faves.grow.me/main.js
Source: chromecache_383.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_383.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_520.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_258.2.dr	String found in binary or memory: https://github.com/contently)
Source: chromecache_572.2.dr	String found in binary or memory: https://github.com/facebook/regenerator/blob/main/LICENSE
Source: chromecache_541.2.dr	String found in binary or memory: https://github.com/imaya/zlib.js
Source: chromecache_345.2.dr, chromecache_314.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_587.2.dr	String found in binary or memory: https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=
Source: chromecache_469.2.dr	String found in binary or memory: https://hb.undertone.com/hb
Source: chromecache_231.2.dr	String found in binary or memory: https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZkxnuNHM6HMAAHezAHb..QAA%26983&gpdr=
Source: chromecache_505.2.dr	String found in binary or memory: https://i0.wp.com/149837791.v2.pressablecdn.com/wp-content/uploads/2022/04/CryptoTab.png
Source: chromecache_456.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95
Source: chromecache_413.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%
Source: chromecache_456.2.dr	String found in binary or memory: https://id.a-mx.com/u?&gdpr=
Source: chromecache_266.2.dr, chromecache_377.2.dr	String found in binary or memory: https://id5.io/
Source: chromecache_469.2.dr	String found in binary or memory: https://idx.liadm.com/idex
Source: chromecache_456.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr=
Source: chromecache_437.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=162110&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fsync.kue
Source: chromecache_583.2.dr	String found in binary or memory: https://it.leeds.ac.uk/it/site/scripts/it?id=privacy
Source: chromecache_323.2.dr	String found in binary or memory: https://live.primis.tech/content/video/css/primisslate.css
Source: chromecache_417.2.dr	String found in binary or memory: https://login.swisspass.ch
Source: chromecache_417.2.dr	String found in binary or memory: https://login.swisspass.ch/
Source: chromecache_417.2.dr	String found in binary or memory: https://login.swisspass.ch/v3/oev-oauth/rest/oauth2/authorization-servers
Source: chromecache_417.2.dr	String found in binary or memory: https://login.swisspass.ch/v3/oevlogin/logout
Source: chromecache_469.2.dr	String found in binary or memory: https://match.adsrvr.org/track/rid?ttd_pid=
Source: chromecache_413.2.dr	String found in binary or memory: https://match.adsrvr.org/track/rid?ttd_pid=prebid&fmt=json
Source: chromecache_437.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=SzhEXqCN&gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_466.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=TAEWcTBw&gdpr=0&gdpr_consent=
Source: chromecache_587.2.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_222.2.dr, chromecache_328.2.dr, chromecache_256.2.dr, chromecache_371.2.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_413.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=6c68086c0c61793&gdpr=$
Source: chromecache_437.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=6e053d779444c00
Source: chromecache_344.2.dr, chromecache_314.2.dr, chromecache_569.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_452.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_452.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_452.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_452.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_452.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_452.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_345.2.dr, chromecache_314.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_344.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_569.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_345.2.dr, chromecache_314.2.dr, chromecache_569.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_345.2.dr, chromecache_314.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_314.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_345.2.dr, chromecache_314.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_587.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_co
Source: chromecache_456.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr=
Source: chromecache_413.2.dr	String found in binary or memory: https://prebid.a-mo.net/cchain/0?gdpr=$
Source: chromecache_214.2.dr, chromecache_403.2.dr	String found in binary or memory: https://protected-by.clarium.io
Source: chromecache_469.2.dr	String found in binary or memory: https://pub.admanmedia.com/?c=o&m=multi
Source: chromecache_505.2.dr	String found in binary or memory: https://qdwoodart.com/article/ess-wakefern-om
Source: chromecache_505.2.dr	String found in binary or memory: https://qdwoodart.com/article/watermelon-juice-cooler
Source: chromecache_227.2.dr	String found in binary or memory: https://reports.intentiq.com
Source: chromecache_432.2.dr	String found in binary or memory: https://resources.infolinks.com/static/id5.js
Source: chromecache_432.2.dr	String found in binary or memory: https://resources.infolinks.com/static/iquid-01.js
Source: chromecache_417.2.dr	String found in binary or memory: https://resources.swisspass.ch
Source: chromecache_231.2.dr	String found in binary or memory: https://router.infolinks.com/dyn/ix-usync?uid=ZkxnuNHM6HMAAHezAHb..QAA%26983
Source: chromecache_469.2.dr	String found in binary or memory: https://rp.liadm.com
Source: chromecache_397.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%
Source: chromecache_231.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieIndex
Source: chromecache_456.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?&gdpr=
Source: chromecache_231.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_231.2.dr	String found in binary or memory: https://s.company-target.com/s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&
Source: chromecache_469.2.dr	String found in binary or memory: https://s2.adform.net/banners/scripts/video/outstream/render.js
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_437.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=kueez&endpoint=us-east
Source: chromecache_466.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=vidazoo&endpoint=us-east
Source: chromecache_437.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-x
Source: chromecache_417.2.dr	String found in binary or memory: https://service.swisspass.ch/handicap?lang=de
Source: chromecache_417.2.dr	String found in binary or memory: https://service.swisspass.ch/handicap?lang=en
Source: chromecache_417.2.dr	String found in binary or memory: https://service.swisspass.ch/handicap?lang=fr
Source: chromecache_417.2.dr	String found in binary or memory: https://service.swisspass.ch/handicap?lang=it
Source: chromecache_526.2.dr	String found in binary or memory: https://some.growplow.events/com.snowplowanalytics.snowplow/tp2
Source: chromecache_437.2.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002ODU4HAAX&us_privacy=&ru=https%3A%2F%2Fsy
Source: chromecache_437.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?partner=kueez-zeta&gdpr=0&us_privacy=&gdpr_consent=&r=https%3A%2
Source: chromecache_413.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatchredir?s=185073&gdpr=$
Source: chromecache_456.2.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=191503&gdpr=
Source: chromecache_442.2.dr	String found in binary or memory: https://static.kueezrtb.com/js/
Source: chromecache_344.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_587.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_469.2.dr	String found in binary or memory: https://sync.admanmedia.com
Source: chromecache_466.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dsono
Source: chromecache_437.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez
Source: chromecache_413.2.dr	String found in binary or memory: https://sync.go.sonobi.com/usa?loc=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cs
Source: chromecache_227.2.dr	String found in binary or memory: https://sync.intentiq.com
Source: chromecache_413.2.dr	String found in binary or memory: https://synchrobox.adswizz.com/register2.php
Source: chromecache_413.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/getUID?curl=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adp
Source: chromecache_466.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub10084465274176&gdpr=0&consent=&us_privacy=
Source: chromecache_344.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_505.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=10
Source: chromecache_294.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=Choosing
Source: chromecache_505.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=Ess
Source: chromecache_505.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=Experian
Source: chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=How
Source: chromecache_294.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=My
Source: chromecache_495.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=Scooby
Source: chromecache_505.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=The
Source: chromecache_495.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=Top
Source: chromecache_505.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=Venmo
Source: chromecache_505.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=Watermelon
Source: chromecache_294.2.dr	String found in binary or memory: https://ts2.mm.bing.net/th?q=What
Source: chromecache_466.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393
Source: chromecache_437.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy
Source: chromecache_227.2.dr	String found in binary or memory: https://ucgfk6g6s7.execute-api.us-east-1.amazonaws.com
Source: chromecache_587.2.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D
Source: chromecache_587.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_469.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/
Source: chromecache_456.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58570/occ?uid=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
Source: chromecache_469.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncOne?id=1&of=2
Source: chromecache_469.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncOne?id=2&of=2
Source: chromecache_417.2.dr	String found in binary or memory: https://winter.swisspass.ch/en/iframe
Source: chromecache_417.2.dr	String found in binary or memory: https://winter.swisspass.ch/fr/iframe
Source: chromecache_417.2.dr	String found in binary or memory: https://winter.swisspass.ch/iframe
Source: chromecache_417.2.dr	String found in binary or memory: https://winter.swisspass.ch/it/iframe
Source: chromecache_505.2.dr	String found in binary or memory: https://www.analyticsinsight.net/10-best-cloud-mining-sites-in-2023-daily-payouts/
Source: chromecache_505.2.dr	String found in binary or memory: https://www.analyticsinsight.net/10-best-free-cryptocurrency-mining-apps-in-2023-a-quick-guide/
Source: chromecache_505.2.dr	String found in binary or memory: https://www.buyucoin.com/free-ethereum
Source: chromecache_251.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_505.2.dr	String found in binary or memory: https://www.coinbase.com/converter/sats/ngn
Source: chromecache_344.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_345.2.dr, chromecache_314.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_344.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_452.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_294.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-54725HQVMF
Source: chromecache_344.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_323.2.dr	String found in binary or memory: https://www.primis.tech?utm_source=promoted
Source: chromecache_505.2.dr	String found in binary or memory: https://www.softwaretestinghelp.com/bitcoin-mining-hardware/
Source: chromecache_505.2.dr	String found in binary or memory: https://www.softwaretestinghelp.com/cryptocurrency-to-mine-with-gpu/
Source: chromecache_505.2.dr	String found in binary or memory: https://www.softwaretestinghelp.com/earn-free-bitcoins/
Source: chromecache_417.2.dr	String found in binary or memory: https://www.swisspass.ch
Source: chromecache_583.2.dr	String found in binary or memory: https://www.swisspass.ch/datenschutz
Source: chromecache_417.2.dr	String found in binary or memory: https://www.swisspass.ch/oauth2/callback
Source: chromecache_344.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_466.2.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dgri
Source: chromecache_456.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=adaptmx&user_id=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&gdpr=
Source: chromecache_466.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=vidazoo&gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_413.2.dr	String found in binary or memory: https://x.serverbid.com/usersync?ttt=1&src=1&cspi=0&cn=5573&dpui=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 52186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 52747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 52608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 51651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 51789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 51687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 52760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 52621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 52198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52517
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52514
Source: unknown	Network traffic detected: HTTP traffic on port 52567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52512
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52510
Source: unknown	Network traffic detected: HTTP traffic on port 52326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52511
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52528
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52529
Source: unknown	Network traffic detected: HTTP traffic on port 52023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52523
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52524
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52533
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 51933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 52477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 52723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 52711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 51827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 52849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52508
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52502
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52500
Source: unknown	Network traffic detected: HTTP traffic on port 51966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52478
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 52146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 51840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52489
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52491
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52492
Source: unknown	Network traffic detected: HTTP traffic on port 52799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 52215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52496
Source: unknown	Network traffic detected: HTTP traffic on port 52809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52438
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52432
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 52605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52441
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 52087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.74.236.223:443 -> 192.168.2.9:50316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.117:443 -> 192.168.2.9:50301 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.244:443 -> 192.168.2.9:50412 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.50.141:443 -> 192.168.2.9:50547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.42.247:443 -> 192.168.2.9:50801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.251.30.134:443 -> 192.168.2.9:50995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.46:443 -> 192.168.2.9:51119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.82:443 -> 192.168.2.9:51239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.171.119.95:443 -> 192.168.2.9:51316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.80.73.249:443 -> 192.168.2.9:51448 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.67.179.153:443 -> 192.168.2.9:51512 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.149.91:443 -> 192.168.2.9:52104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.117:443 -> 192.168.2.9:52263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.122:443 -> 192.168.2.9:52531 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.win@83/630@758/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=1564,i,17994336064599904773,4391651044741737396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://jaz.wxk.mybluehost.me/ch/104c5"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=1564,i,17994336064599904773,4391651044741737396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://jaz.wxk.mybluehost.me/ch/104c5	100%	Avira URL Cloud	phishing
http://jaz.wxk.mybluehost.me/ch/104c5	15%	Virustotal		Browse
http://jaz.wxk.mybluehost.me/ch/104c5	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/googleData.json	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/iab2Data.json	0%	URL Reputation	safe
https://developers.google.com/open-source/licenses/bsd	0%	URL Reputation	safe
http://creativecommons.org/ns#	0%	URL Reputation	safe
https://custommapposter.com/goto?target=eyJpdiI6ImRERlRrc2xOTjhaNUdNY1FMZW9IbHc9PSIsInZhbHVlIjoiMGN0	0%	Avira URL Cloud	safe
https://d-code.liadm.com/did-004d.min.js	0%	Avira URL Cloud	safe
https://id5-sync.com/i/1013/8.gif?o=api&id5id=ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&gdpr_consent=undefined&gdpr=false	0%	Avira URL Cloud	safe
https://ssc-cms.33across.com/ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1718875322%26external_user_id%3Dd7c589fa-248b-42e0-8bc4-ffb4bdc33d5c	0%	Avira URL Cloud	safe
https://login.swisspass.ch/v3/oevlogin/logout	0%	Avira URL Cloud	safe
https://track.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2273347548520925&correlator=3220266305235650&eid=31083354%2C31083555%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=7&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283328709&lmt=1716004133&adxs=803&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2F&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283329&ga_hid=310703479&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283320832&idt=5735&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D300x250_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_500%26auction_id%3Deda2b4db-d900-478b-a6a1-d9583667eaaf%26monu_df%3D0.05%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.05%26hb_size%3D300x250%26hb_adid%3D2068267cdfb948d%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.05%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D1%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=434882259&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC	0%	Avira URL Cloud	safe
https://custommapposter.com/goto?target=eyJpdiI6IlRiZWdISmxnNkl1d1BQbUtVakxCWXc9PSIsInZhbHVlIjoiTVht	0%	Avira URL Cloud	safe
https://custommapposter.com/goto?target=eyJpdiI6IlVQcElhbkwwTkJlemRrVjVVRmVZMlE9PSIsInZhbHVlIjoieHdv	0%	Avira URL Cloud	safe
https://custommapposter.com/page/cookie-agreement	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-the-dog-doin/947	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMed	0%	Avira URL Cloud	safe
http://jaz.wxk.mybluehost.me/ch/104c5/css/sso.min-20200819.css	100%	Avira URL Cloud	phishing
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291547&to=240&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526	0%	Avira URL Cloud	safe
https://live.primis.tech/main/js/deflate.min.js	0%	Avira URL Cloud	safe
https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID	0%	Avira URL Cloud	safe
https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002ODU4HAAX&us_privacy=&ru=https%3A%2F%2Fsy	0%	Avira URL Cloud	safe
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/rid?ttd_pid=2jqw284&fmt=json	0%	Avira URL Cloud	safe
https://sync.1rx.io/usersync2/rubicon	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-questions-to-ask-a-dog-breeder/947	0%	Avira URL Cloud	safe
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22131160d90f6a1f9e%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3ba70010-bc4c-455f-9e7b-ada9bdb499f7&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22555ed8b2-faf8-4994-aca8-4b165973dbae%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0	0%	Avira URL Cloud	safe
https://cs.emxdgt.com/um?redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fcad-us%3Fuser_id%3D$UID	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-is-the-best-dog-food/947	0%	Avira URL Cloud	safe
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292557&bidder=kueezrtb&at=display	0%	Avira URL Cloud	safe
https://live.primis.tech/content/omid/static/omweb-v1.min.js	0%	Avira URL Cloud	safe
https://github.com/imaya/zlib.js	0%	Avira URL Cloud	safe
https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy	0%	Avira URL Cloud	safe
https://winter.swisspass.ch/fr/iframe	0%	Avira URL Cloud	safe
https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js	0%	Avira URL Cloud	safe
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	0%	Avira URL Cloud	safe
https://custommapposter.com/goto?target=eyJpdiI6Ikk5cUtsc3ZlUDhCN1NjUlRiUHRnNVE9PSIsInZhbHVlIjoiR1hl	0%	Avira URL Cloud	safe
https://www.primis.tech?utm_source=promoted	0%	Avira URL Cloud	safe
https://custommapposter.com/goto?target=eyJpdiI6IkFjNFFkdjR3VjdLUThTWm5iTGVOYXc9PSIsInZhbHVlIjoiMG94	0%	Avira URL Cloud	safe
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dsono	0%	Avira URL Cloud	safe
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283335562&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	0%	Avira URL Cloud	safe
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx	0%	Avira URL Cloud	safe
https://service.swisspass.ch/handicap?lang=it	0%	Avira URL Cloud	safe
https://www.analyticsinsight.net/10-best-free-cryptocurrency-mining-apps-in-2023-a-quick-guide/	0%	Avira URL Cloud	safe
https://www.cloudflare.com/5xx-error-landing	0%	Avira URL Cloud	safe
https://ts2.mm.bing.net/th?q=Ess	0%	Avira URL Cloud	safe
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283328986&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-sound-does-the-dog-make/947	0%	Avira URL Cloud	safe
https://visitor.omnitagjs.com/visitor/bsync?uid=ee28081dc141859df3e9c39bf89f63cf&name=AMAZON&url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dadyoulike.com%26id%3D%7BuserId%7D	0%	Avira URL Cloud	safe
https://ts2.mm.bing.net/th?q=What	0%	Avira URL Cloud	safe
https://pr-bh.ybp.yahoo.com/sync/pubmatic/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_	0%	Avira URL Cloud	safe
https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dpubmatic%26uid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B	0%	Avira URL Cloud	safe
https://custommapposter.com/static-res/css/newsike.css?id=98d7a23ace76a572352b	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-is-better-dry-or-wet-dog-food/947	0%	Avira URL Cloud	safe
https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D	0%	Avira URL Cloud	safe
https://www.swisspass.ch/env.js?v=1715295378	0%	Avira URL Cloud	safe
https://resources.infolinks.com/js/1931.004-3.034/frame_inplace.js	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-kind-of-dog-food-is-best-for-your-dog/947	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-is-the-most-aggressive-dog-breed/947	0%	Avira URL Cloud	safe
https://custommapposter.com/goto?target=eyJpdiI6Im4vQ0JDZjVLbmI0M3B6bVgzbUUvK3c9PSIsInZhbHVlIjoiRHRk	0%	Avira URL Cloud	safe
https://fast.nexx360.io/prebid	0%	Avira URL Cloud	safe
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63986577&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://sync.kueezrtb.com/api/sync/iframe/?cid=65b2119efa63bcb4a70d58bb&gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://ts2.mm.bing.net/th?q=Choosing	0%	Avira URL Cloud	safe
https://pub.admanmedia.com/?c=o&m=multi	0%	Avira URL Cloud	safe
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10602318&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=b3c084dde49de842&pvi=f175e2ab628ce64b&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Fsearch-article&furl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&sr=1280x1024&type=latest:br&_=1716283360360&bidder=kueezrtb&at=display&v=1	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID	0%	Avira URL Cloud	safe
https://sync.go.sonobi.com/usa?loc=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5444%26spui%3D%26dpui%3D	0%	Avira URL Cloud	safe
https://cdn-ima.33across.com/ppid.js	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-dog-looks-like-a-bear/947	0%	Avira URL Cloud	safe
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331458&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	0%	Avira URL Cloud	safe
https://service.swisspass.ch/handicap?lang=de	0%	Avira URL Cloud	safe
https://custommapposter.com/article/how-to-teach-your-dog-to-be-obedient/947	0%	Avira URL Cloud	safe
https://sync.1rx.io/usersync/quantcast/byTYNm8ljTd0c49hOyLBYGkk3zF0Jd9nP3ezzg96?	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-dog-food-is-most-recommended-by-veterinarians/947	0%	Avira URL Cloud	safe
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292953&bidder=kueezrtb&at=display	0%	Avira URL Cloud	safe
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290870&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	0%	Avira URL Cloud	safe
https://custommapposter.com/static-res/img/newsike/favicon-16x16.png?id=a43a5a3c7de4d329262b	0%	Avira URL Cloud	safe
https://bh.contextweb.com/bh/rtset?pid=561516&ev=1&us_privacy=&rurl=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D5%26xu%3D%25%25VGUID%25%25	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-does-it-mean-when-your-dog-winks-at-you/947	0%	Avira URL Cloud	safe
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22203355575348f86%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=ce7e0257-0a75-4aec-b185-aeb1c1104b4c&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22f596db68-5d7c-4405-b7cf-44eb7f4bdc1f%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2F%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%2C%22pba%22%3A%22da2%2F5qVrzBCfhoJZhHtyxA%3D%3D%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22adserver.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22rtiPartner%22%3A%22TDID%22%7D%7D%5D%7D%5D&coppa=0	0%	Avira URL Cloud	safe
https://custommapposter.com/article/largest-public-bitcoin-mining-companies/926	0%	Avira URL Cloud	safe
https://custommapposter.com/goto?target=eyJpdiI6InBsNVBOSlluUWVicU9HQy9IdWt6UUE9PSIsInZhbHVlIjoiWi8x	0%	Avira URL Cloud	safe
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779	0%	Avira URL Cloud	safe
https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=2&external_user_id=ZkxnuNHM6HMAAHezAHb..QAA%26983	0%	Avira URL Cloud	safe
https://service.swisspass.ch/handicap?lang=en	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.js	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-is-a-dog/947	0%	Avira URL Cloud	safe
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290788&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	0%	Avira URL Cloud	safe
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%	0%	Avira URL Cloud	safe
https://custommapposter.com/article/what-da-dog-doin/947	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
securepubads.g.doubleclick.net	142.250.185.226	true	false		unknown
um.simpli.fi	35.204.74.118	true	false		unknown
cms-xch.33across.com	34.117.239.71	true	false		unknown
global.px.quantserve.com	91.228.74.244	true	false		unknown
ssum.casalemedia.com	104.18.36.155	true	false		unknown
rtb.openx.net	35.227.252.103	true	false		unknown
1.cpm.ak-is2.net	77.245.57.72	true	false		unknown
bttrack.com	192.132.33.68	true	false		unknown
149837791.v2.pressablecdn.com	192.0.77.39	true	false		unknown
crb.kargo.com	18.193.12.9	true	false		unknown
mwzeom.zeotap.com	172.67.40.173	true	false		unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.75.62.37	true	false		unknown
api.intentiq.com	13.32.121.27	true	false		unknown
openrtb-dc11.axonix.com	155.204.117.1	true	false		unknown
sync.intentiq.com	3.160.150.30	true	false		unknown
api-2-0.spot.im	18.245.31.66	true	false		unknown
id.rlcdn.com	35.244.174.68	true	false		unknown
match.adsrvr.org	35.71.131.137	true	false		unknown
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	54.80.58.6	true	false		unknown
track.kueezssp.com	172.67.71.58	true	false		unknown
pagead-googlehosted.l.google.com	142.250.185.129	true	false		unknown
creativecdn.com	185.184.8.90	true	false		unknown
d1giprow6b9psh.cloudfront.net	13.32.27.11	true	false		unknown
uip.semasio.net	77.243.51.121	true	false		unknown
static.kueezrtb.com	172.67.21.232	true	false		unknown
m.deepintent.com	169.197.150.8	true	false		unknown
iad-2-apex.go.sonobi.com	69.166.1.64	true	false		unknown
pixel-sync.sitescout.com	34.36.216.150	true	false		unknown
pixel.onaudience.com	141.94.171.215	true	false		unknown
d1ykf07e75w7ss.cloudfront.net	108.138.6.136	true	false		unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false		unknown
hblg.media.net	23.212.88.20	true	false		unknown
lg3.media.net	23.212.88.20	true	false		unknown
rtb.adgrx.com	54.217.19.5	true	false		unknown
config.aps.amazon-adsystem.com	18.245.31.123	true	false		unknown
d18q3505w6wzgu.cloudfront.net	18.173.205.117	true	false		unknown
www.googletagservices.com	142.250.185.226	true	false		unknown
id.crwdcntrl.net	34.250.113.16	true	false		unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false		unknown
iad-2-sync.go.sonobi.com	69.166.1.66	true	false		unknown
hde.tynt.com	67.202.105.32	true	false		unknown
pixel-eu.onaudience.com	141.94.170.64	true	false		unknown
jaz.wxk.mybluehost.me	162.241.225.132	true	true		unknown
api.rlcdn.com	34.120.133.55	true	false		unknown
spug-lhrc.pubmnet.com	185.64.190.81	true	false		unknown
rtb.adentifi.com	23.23.73.21	true	false		unknown
synchroscript.deliveryengine.adswizz.com	18.245.46.53	true	false		unknown
monu.delivery	185.3.92.76	true	false		unknown
pixel.tapad.com	34.111.113.62	true	false		unknown
rtb-csync-euw2.smartadserver.com	51.178.195.217	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
pubads.g.doubleclick.net	216.58.206.34	true	false		unknown
hy7044olb.puzztake.com	108.61.144.231	true	false		unknown
h7mzk9dlb.puzztake.com	134.122.125.115	true	false		unknown
ad-delivery.net	172.67.69.19	true	false		unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		unknown
match.adsby.bidtheatre.com	64.227.64.62	true	false		unknown
matching.truffle.bid	23.88.86.2	true	false		unknown
gtrack.kueezrtb.com	104.22.35.123	true	false		unknown
d2avimlm6gq3h9.cloudfront.net	18.173.210.195	true	false		unknown
protected-by.clarium.io	52.208.36.168	true	false		unknown
1x1.a-mo.net	44.193.116.123	true	false		unknown
prebid-s2s.media.net	34.107.148.139	true	false		unknown
livepixel-production.bln.liveintent.com	100.28.13.136	true	false		unknown
sync.1rx.io	46.228.174.117	true	false		unknown
ds-pr-bh.ybp.gysm.yahoodns.net	52.31.50.141	true	false		unknown
idaas-ext.cph.liveintent.com	18.211.112.117	true	false		unknown
api.id5-sync.com	162.19.138.120	true	false		unknown
track.kueezrtb.com	172.67.21.232	true	false		unknown
cdn-content.ampproject.org	216.58.206.65	true	false		unknown
spug-amsfpairbc.pubmnet.com	198.47.127.20	true	false		unknown
bisrtb.cootlogix.com	45.76.14.250	true	false		unknown
us-u.openx.net	35.244.159.8	true	false		unknown
nydc1.outbrain.org	64.202.112.191	true	false		unknown
yummy.consumable.com	99.86.4.62	true	false		unknown
hpq1jzhlb.puzztake.com	159.203.178.27	true	false		unknown
d1jvc9b8z3vcjs.cloudfront.net	18.244.15.236	true	false		unknown
d27la2n6wh4qws.cloudfront.net	18.66.121.83	true	false		unknown
d26da0dx1ebj70.cloudfront.net	143.204.98.115	true	false		unknown
prod.appnexus.map.fastly.net	151.101.1.108	true	false		unknown
cm-x.mgid.com	8.2.110.161	true	false		unknown
d3div1mtym39ic.cloudfront.net	13.32.121.81	true	false		unknown
hb.digbearings.com	54.171.119.95	true	false		unknown
htlb.casalemedia.com	104.18.36.155	true	false		unknown
usersync.gumgum.com	34.247.233.198	true	false		unknown
cs.seedtag.com	104.16.183.87	true	false		unknown
cs.digbearings.com	54.195.106.144	true	false		unknown
lbs-event.gcp.lineate-33x.net	34.117.239.71	true	false		unknown
prod.tahoe-analytics.publishers.advertising.a2z.com	54.218.45.230	true	false		unknown
gum.aidemsrv.com	104.17.43.93	true	false		unknown
idx.cph.liveintent.com	52.203.33.12	true	false		unknown
pxl.iqm.com	34.193.171.116	true	false		unknown
exchange.mediavine.com	52.29.167.224	true	false		unknown
d2of0gfv69hsgh.cloudfront.net	13.32.99.18	true	false		unknown
nym1-ib.adnxs.com	68.67.179.153	true	false		unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false		unknown
lexicon.33across.com	35.244.193.51	true	false		unknown
cs.yellowblue.io	54.217.173.39	true	false		unknown
match-eu-central-1-ecs.sharethrough.com	3.67.74.124	true	false		unknown
id5-sync.com	141.95.33.120	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://d-code.liadm.com/did-004d.min.js	false	Avira URL Cloud: safe	unknown
https://id5-sync.com/i/1013/8.gif?o=api&id5id=ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&gdpr_consent=undefined&gdpr=false	false	Avira URL Cloud: safe	unknown
https://ssc-cms.33across.com/ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1718875322%26external_user_id%3Dd7c589fa-248b-42e0-8bc4-ffb4bdc33d5c	false	Avira URL Cloud: safe	unknown
https://track.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2273347548520925&correlator=3220266305235650&eid=31083354%2C31083555%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=7&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283328709&lmt=1716004133&adxs=803&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2F&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283329&ga_hid=310703479&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283320832&idt=5735&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D300x250_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_500%26auction_id%3Deda2b4db-d900-478b-a6a1-d9583667eaaf%26monu_df%3D0.05%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.05%26hb_size%3D300x250%26hb_adid%3D2068267cdfb948d%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.05%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D1%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=434882259&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
http://jaz.wxk.mybluehost.me/ch/104c5/css/sso.min-20200819.css	false	Avira URL Cloud: phishing	unknown
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291547&to=240&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526	false	Avira URL Cloud: safe	unknown
https://live.primis.tech/main/js/deflate.min.js	false	Avira URL Cloud: safe	unknown
https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID	false	Avira URL Cloud: safe	unknown
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync2/rubicon	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/rid?ttd_pid=2jqw284&fmt=json	false	Avira URL Cloud: safe	unknown
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22131160d90f6a1f9e%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3ba70010-bc4c-455f-9e7b-ada9bdb499f7&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22555ed8b2-faf8-4994-aca8-4b165973dbae%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0	false	Avira URL Cloud: safe	unknown
https://cs.emxdgt.com/um?redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fcad-us%3Fuser_id%3D$UID	false	Avira URL Cloud: safe	unknown
https://live.primis.tech/content/omid/static/omweb-v1.min.js	false	Avira URL Cloud: safe	unknown
http://jaz.wxk.mybluehost.me/ch/104c5	true		unknown
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292557&bidder=kueezrtb&at=display	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js	false	Avira URL Cloud: safe	unknown
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	false	Avira URL Cloud: safe	unknown
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283335562&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	false	Avira URL Cloud: safe	unknown
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283328986&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331	false	Avira URL Cloud: safe	unknown
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5140084931246551630	false		unknown
https://visitor.omnitagjs.com/visitor/bsync?uid=ee28081dc141859df3e9c39bf89f63cf&name=AMAZON&url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dadyoulike.com%26id%3D%7BuserId%7D	false	Avira URL Cloud: safe	unknown
https://pr-bh.ybp.yahoo.com/sync/pubmatic/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dpubmatic%26uid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/static-res/css/newsike.css?id=98d7a23ace76a572352b	false	Avira URL Cloud: safe	unknown
https://www.swisspass.ch/env.js?v=1715295378	false	Avira URL Cloud: safe	unknown
https://resources.infolinks.com/js/1931.004-3.034/frame_inplace.js	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63986577&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://sync.kueezrtb.com/api/sync/iframe/?cid=65b2119efa63bcb4a70d58bb&gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10602318&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=b3c084dde49de842&pvi=f175e2ab628ce64b&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Fsearch-article&furl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&sr=1280x1024&type=latest:br&_=1716283360360&bidder=kueezrtb&at=display&v=1	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID	false	Avira URL Cloud: safe	unknown
https://sync.go.sonobi.com/usa?loc=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5444%26spui%3D%26dpui%3D	false	Avira URL Cloud: safe	unknown
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331458&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync/quantcast/byTYNm8ljTd0c49hOyLBYGkk3zF0Jd9nP3ezzg96?	false	Avira URL Cloud: safe	unknown
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292953&bidder=kueezrtb&at=display	false	Avira URL Cloud: safe	unknown
https://monu.delivery/assets/scripts/vendors/xdomain/1.0.8a/xdomain_cookie.html#%7B%22namespace%22%3A%22mmt.xDomain%22%2C%22window_origin%22%3A%22https%3A%2F%2Fcustommapposter.com%22%2C%22iframe_origin%22%3A%22https%3A%2F%2Fmonu.delivery%2Fassets%2Fscripts%2Fvendors%2Fxdomain%2F1.0.8a%22%2C%22debug%22%3Afalse%7D	false		unknown
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290870&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/static-res/img/newsike/favicon-16x16.png?id=a43a5a3c7de4d329262b	false	Avira URL Cloud: safe	unknown
https://bh.contextweb.com/bh/rtset?pid=561516&ev=1&us_privacy=&rurl=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D5%26xu%3D%25%25VGUID%25%25	false	Avira URL Cloud: safe	unknown
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%22203355575348f86%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=ce7e0257-0a75-4aec-b185-aeb1c1104b4c&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22f596db68-5d7c-4405-b7cf-44eb7f4bdc1f%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2F%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22geo%22%3A%7B%22ip%22%3A%228.46.123.175%22%2C%22city%22%3A%22New%20York%22%2C%22region%22%3A%22NY%22%2C%22country%22%3A%22US%22%2C%22lat%22%3A40.7123%2C%22lon%22%3A-74.0068%2C%22type%22%3A2%2C%22accuracy%22%3A20%2C%22ipservice%22%3A3%2C%22metro%22%3A%22501%22%2C%22zip%22%3A%2210118%22%2C%22tz%22%3A%22America%2FNew_York%22%2C%22utcoffset%22%3A240%7D%2C%22devicetype%22%3A2%2C%22js%22%3A1%2C%22langb%22%3A%22en-US%22%2C%22ip%22%3A%228.46.123.175%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22monumetric.com%22%2C%22sid%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A0%2C%22pba%22%3A%22da2%2F5qVrzBCfhoJZhHtyxA%3D%3D%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22adserver.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22rtiPartner%22%3A%22TDID%22%7D%7D%5D%7D%5D&coppa=0	false	Avira URL Cloud: safe	unknown
https://gtrack.kueezrtb.com/dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779	false	Avira URL Cloud: safe	unknown
https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=2&external_user_id=ZkxnuNHM6HMAAHezAHb..QAA%26983	false	Avira URL Cloud: safe	unknown
https://g2.gumgum.com/hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290788&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://custommapposter.com/goto?target=eyJpdiI6ImRERlRrc2xOTjhaNUdNY1FMZW9IbHc9PSIsInZhbHVlIjoiMGN0	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://login.swisspass.ch/v3/oevlogin/logout	chromecache_417.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/goto?target=eyJpdiI6IlRiZWdISmxnNkl1d1BQbUtVakxCWXc9PSIsInZhbHVlIjoiTVht	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/goto?target=eyJpdiI6IlVQcElhbkwwTkJlemRrVjVVRmVZMlE9PSIsInZhbHVlIjoieHdv	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/page/cookie-agreement	chromecache_505.2.dr, chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-the-dog-doin/947	chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMed	chromecache_494.2.dr, chromecache_311.2.dr, chromecache_261.2.dr, chromecache_402.2.dr, chromecache_392.2.dr, chromecache_399.2.dr, chromecache_516.2.dr, chromecache_588.2.dr, chromecache_285.2.dr, chromecache_305.2.dr, chromecache_306.2.dr, chromecache_310.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002ODU4HAAX&us_privacy=&ru=https%3A%2F%2Fsy	chromecache_437.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-questions-to-ask-a-dog-breeder/947	chromecache_495.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-is-the-best-dog-food/947	chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/imaya/zlib.js	chromecache_541.2.dr	false	Avira URL Cloud: safe	unknown
https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy	chromecache_437.2.dr	false	Avira URL Cloud: safe	unknown
https://winter.swisspass.ch/fr/iframe	chromecache_417.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/goto?target=eyJpdiI6Ikk5cUtsc3ZlUDhCN1NjUlRiUHRnNVE9PSIsInZhbHVlIjoiR1hl	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://www.primis.tech?utm_source=promoted	chromecache_323.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/goto?target=eyJpdiI6IkFjNFFkdjR3VjdLUThTWm5iTGVOYXc9PSIsInZhbHVlIjoiMG94	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dsono	chromecache_466.2.dr	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx	chromecache_268.2.dr, chromecache_367.2.dr, chromecache_499.2.dr, chromecache_226.2.dr, chromecache_535.2.dr, chromecache_356.2.dr, chromecache_398.2.dr, chromecache_360.2.dr, chromecache_577.2.dr, chromecache_418.2.dr	false	Avira URL Cloud: safe	unknown
https://service.swisspass.ch/handicap?lang=it	chromecache_417.2.dr	false	Avira URL Cloud: safe	unknown
https://www.analyticsinsight.net/10-best-free-cryptocurrency-mining-apps-in-2023-a-quick-guide/	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_251.2.dr	false	Avira URL Cloud: safe	unknown
https://ts2.mm.bing.net/th?q=Ess	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-sound-does-the-dog-make/947	chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://ts2.mm.bing.net/th?q=What	chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_	chromecache_463.2.dr, chromecache_415.2.dr, chromecache_439.2.dr, chromecache_522.2.dr, chromecache_369.2.dr, chromecache_443.2.dr, chromecache_441.2.dr, chromecache_484.2.dr, chromecache_578.2.dr, chromecache_564.2.dr, chromecache_409.2.dr, chromecache_224.2.dr, chromecache_464.2.dr, chromecache_459.2.dr, chromecache_359.2.dr, chromecache_451.2.dr, chromecache_275.2.dr, chromecache_591.2.dr, chromecache_549.2.dr, chromecache_455.2.dr, chromecache_545.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-is-better-dry-or-wet-dog-food/947	chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D	chromecache_587.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-kind-of-dog-food-is-best-for-your-dog/947	chromecache_495.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-is-the-most-aggressive-dog-breed/947	chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/goto?target=eyJpdiI6Im4vQ0JDZjVLbmI0M3B6bVgzbUUvK3c9PSIsInZhbHVlIjoiRHRk	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://fast.nexx360.io/prebid	chromecache_469.2.dr	false	Avira URL Cloud: safe	unknown
https://ts2.mm.bing.net/th?q=Choosing	chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://pub.admanmedia.com/?c=o&m=multi	chromecache_469.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_520.2.dr	false	URL Reputation: safe	unknown
https://cdn-ima.33across.com/ppid.js	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-dog-looks-like-a-bear/947	chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://service.swisspass.ch/handicap?lang=de	chromecache_417.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_520.2.dr	false	URL Reputation: safe	unknown
https://custommapposter.com/article/how-to-teach-your-dog-to-be-obedient/947	chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-dog-food-is-most-recommended-by-veterinarians/947	chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-does-it-mean-when-your-dog-winks-at-you/947	chromecache_495.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/open-source/licenses/bsd	chromecache_222.2.dr	false	URL Reputation: safe	unknown
https://custommapposter.com/article/largest-public-bitcoin-mining-companies/926	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/goto?target=eyJpdiI6InBsNVBOSlluUWVicU9HQy9IdWt6UUE9PSIsInZhbHVlIjoiWi8x	chromecache_505.2.dr	false	Avira URL Cloud: safe	unknown
https://service.swisspass.ch/handicap?lang=en	chromecache_417.2.dr	false	Avira URL Cloud: safe	unknown
http://creativecommons.org/ns#	chromecache_272.2.dr, chromecache_330.2.dr	false	URL Reputation: safe	unknown
https://assets.adobedtm.com/15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.js	chromecache_506.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-is-a-dog/947	chromecache_495.2.dr, chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
https://custommapposter.com/article/what-da-dog-doin/947	chromecache_512.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
145.40.97.67	am6-prebid.a-mx.net	Netherlands		34108	BREEDBANDDELFTNL	false
145.40.97.66	unknown	Netherlands		34108	BREEDBANDDELFTNL	false
147.182.216.8	hob9zeclb.puzztake.com	United States		27555	BV-PUBLIC-ASNUS	false
45.76.14.250	bisrtb.cootlogix.com	United States		20473	AS-CHOOPAUS	false
104.18.24.173	a.tribalfusion.com	United States		13335	CLOUDFLARENETUS	false
13.32.121.91	client.aps.amazon-adsystem.com	United States		16509	AMAZON-02US	false
142.250.185.226	securepubads.g.doubleclick.net	United States		15169	GOOGLEUS	false
3.160.150.30	sync.intentiq.com	United States		16509	AMAZON-02US	false
18.211.112.117	idaas-ext.cph.liveintent.com	United States		14618	AMAZON-AESUS	false
130.211.23.194	api.btloader.com	United States		15169	GOOGLEUS	false
140.82.63.115	unknown	United States		20473	AS-CHOOPAUS	false
134.122.125.115	h7mzk9dlb.puzztake.com	United States		14061	DIGITALOCEAN-ASNUS	false
68.67.179.153	nym1-ib.adnxs.com	United States		29990	ASN-APPNEXUS	false
172.64.144.166	cdn.confiant-integrations.net	United States		13335	CLOUDFLARENETUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States		62713	AS-PUBMATICUS	false
37.252.171.52	unknown	European Union		29990	ASN-APPNEXUS	false
35.71.131.137	match.adsrvr.org	United States		237	MERIT-AS-14US	false
159.89.246.130	cx.serverbid.com	United States		14061	DIGITALOCEAN-ASNUS	false
141.94.170.64	pixel-eu.onaudience.com	Germany		680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
34.193.171.116	pxl.iqm.com	United States		14618	AMAZON-AESUS	false
13.32.121.81	d3div1mtym39ic.cloudfront.net	United States		16509	AMAZON-02US	false
192.0.77.2	i0.wp.com	United States		2635	AUTOMATTICUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
108.138.8.164	unknown	United States		16509	AMAZON-02US	false
23.88.86.2	matching.truffle.bid	United States		18978	ENZUINC-US	false
159.223.96.127	hj5ozcalb.puzztake.com	United States		46118	CELANESE-US	false
52.94.223.37	aax-eu.amazon-adsystem.com	United States		16509	AMAZON-02US	false
185.255.84.152	unknown	France		200271	IGUANE-FR	false
185.255.84.153	visitor-fra02.omnitagjs.com	France		200271	IGUANE-FR	false
185.255.84.151	hb-api-fra02.omnitagjs.com	France		200271	IGUANE-FR	false
193.203.121.166	www.swisspass.ch	Switzerland		31004	SBB-CFF-FFSTelecomSBBCH	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States		26228	SERVEPATHUS	false
162.19.138.120	api.id5-sync.com	United States		209	CENTURYLINK-US-LEGACY-QWESTUS	false
185.89.210.46	unknown	Germany		29990	ASN-APPNEXUS	false
213.155.156.166	d5p.de17a.com	European Union		1299	TELIANETTeliaCarrierEU	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France		44788	ASN-CRITEO-EUROPEFR	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States		15169	GOOGLEUS	false
172.67.21.232	static.kueezrtb.com	United States		13335	CLOUDFLARENETUS	false
18.158.104.84	unknown	United States		16509	AMAZON-02US	false
172.67.41.60	btloader.com	United States		13335	CLOUDFLARENETUS	false
34.102.163.6	ad.mrtnsvr.com	United States		15169	GOOGLEUS	false
142.250.186.129	unknown	United States		15169	GOOGLEUS	false
141.94.171.215	pixel.onaudience.com	Germany		680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
54.77.79.252	rtb.gumgum.com	United States		16509	AMAZON-02US	false
18.173.205.117	d18q3505w6wzgu.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
54.195.106.144	cs.digbearings.com	United States		16509	AMAZON-02US	false
143.204.98.115	d26da0dx1ebj70.cloudfront.net	United States		16509	AMAZON-02US	false
162.19.138.119	lb.eu-1-id5-sync.com	United States		209	CENTURYLINK-US-LEGACY-QWESTUS	false
172.217.16.130	googleads.g.doubleclick.net	United States		15169	GOOGLEUS	false
172.217.16.132	www.google.com	United States		15169	GOOGLEUS	false
46.228.174.117	sync.1rx.io	United Kingdom		56396	TURNGB	false
65.9.66.68	tags.crwdcntrl.net	United States		16509	AMAZON-02US	false
44.193.116.123	1x1.a-mo.net	United States		14618	AMAZON-AESUS	false
34.253.161.117	unknown	United States		16509	AMAZON-02US	false
91.228.74.244	global.px.quantserve.com	United Kingdom		27281	QUANTCASTUS	false
13.32.27.11	d1giprow6b9psh.cloudfront.net	United States		7018	ATT-INTERNET4US	false
85.114.159.118	dsp.adfarm1.adition.com	Germany		24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
18.194.121.192	unknown	United States		16509	AMAZON-02US	false
159.223.124.226	unknown	United States		46118	CELANESE-US	false
2.18.96.18	contextual.media.net	European Union		20940	AKAMAI-ASN1EU	false
52.203.33.12	idx.cph.liveintent.com	United States		14618	AMAZON-AESUS	false
198.47.127.20	spug-amsfpairbc.pubmnet.com	United States		62713	AS-PUBMATICUS	false
162.19.138.82	unknown	United States		209	CENTURYLINK-US-LEGACY-QWESTUS	false
18.66.121.83	d27la2n6wh4qws.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
3.124.64.248	eu-tlx.3lift.com	United States		16509	AMAZON-02US	false
141.95.171.142	green.erne.co	Germany		680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
108.138.26.29	d3cht5btq2kl2s.cloudfront.net	United States		16509	AMAZON-02US	false
69.166.1.8	unknown	United States		27630	AS-XFERNETUS	false
104.21.70.8	corporatedefenseetl.com	United States		13335	CLOUDFLARENETUS	false
3.75.62.37	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States		16509	AMAZON-02US	false
34.96.71.22	s.dsp-prod.demandbase.com	United States		15169	GOOGLEUS	false
54.164.74.54	sync.srv.stackadapt.com	United States		14618	AMAZON-AESUS	false
8.2.110.161	cm-x.mgid.com	United States		46636	NATCOWEBUS	false
192.0.77.39	149837791.v2.pressablecdn.com	United States		2635	AUTOMATTICUS	false
104.18.36.155	ssum.casalemedia.com	United States		13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States		13335	CLOUDFLARENETUS	false
54.171.119.95	hb.digbearings.com	United States		16509	AMAZON-02US	false
104.16.183.87	cs.seedtag.com	United States		13335	CLOUDFLARENETUS	false
172.217.16.193	unknown	United States		15169	GOOGLEUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom		39832	NO-OPERANO	false
34.117.239.71	cms-xch.33across.com	United States		139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
23.23.73.21	rtb.adentifi.com	United States		14618	AMAZON-AESUS	false
142.250.185.129	pagead-googlehosted.l.google.com	United States		15169	GOOGLEUS	false
68.67.178.10	unknown	United States		29990	ASN-APPNEXUS	false
104.19.177.52	cdn.cookielaw.org	United States		13335	CLOUDFLARENETUS	false
67.202.105.23	pixel.33across.com	United States		32748	STEADFASTUS	false
3.71.149.231	unknown	United States		16509	AMAZON-02US	false
172.64.151.101	ssum-sec.casalemedia.com	United States		13335	CLOUDFLARENETUS	false
35.214.149.91	user-data-eu.bidswitch.net	United States		19527	GOOGLE-2US	false
195.5.165.20	core.iprom.net	Slovenia		44968	IPROM-ASSI	false
124.146.153.162	tg.dr.socdm.com	Japan		2514	INFOSPHERENTTPCCommunicationsIncJP	false
185.89.210.82	ib.anycast.adnxs.com	Germany		29990	ASN-APPNEXUS	false
67.202.105.33	de.tynt.com	United States		32748	STEADFASTUS	false
67.202.105.32	hde.tynt.com	United States		32748	STEADFASTUS	false
159.223.146.222	unknown	United States		46118	CELANESE-US	false
52.86.37.184	sync.ipredictive.com	United States		14618	AMAZON-AESUS	false
142.250.74.198	ad.doubleclick.net	United States		15169	GOOGLEUS	false
192.132.33.68	bttrack.com	United States		18568	BIDTELLECTUS	false
104.254.151.60	lax1-ib.adnxs.com	United States		29990	ASN-APPNEXUS	false
54.80.58.6	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States		14618	AMAZON-AESUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1444847
Start date and time:	2024-05-21 11:20:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://jaz.wxk.mybluehost.me/ch/104c5
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@83/630@758/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://corporatedefenseetl.com/home Browse: https://www.swisspass.ch//pw-reset?lang=de&provider=sbbkn&callback=oevlogin Browse: https://www.swisspass.ch//register?lang=de&provider=sbbkn&callback=oevlogin Browse: https://custommapposter.com/ Browse: https://custommapposter.com/search-article Browse: https://custommapposter.com/article/top/926#toc-0 Browse: https://custommapposter.com/article/top/926#toc-1 Browse: https://custommapposter.com/article/top/926#toc-2

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 142.250.185.163, 172.217.18.110, 173.194.76.84, 34.104.35.123, 172.217.23.106, 172.217.16.202, 142.250.185.170, 142.250.185.138, 172.217.18.10, 142.250.185.74, 216.58.212.138, 172.217.18.106, 142.250.185.106, 142.250.186.170, 216.58.212.170, 142.250.186.138, 216.58.206.42, 142.250.184.202, 142.250.185.234, 142.250.186.106, 20.114.59.183, 192.229.221.95, 142.250.185.136, 20.242.39.171, 151.101.194.49, 151.101.2.49, 151.101.66.49, 151.101.130.49, 216.58.206.66, 142.250.185.202, 142.250.186.42, 142.250.186.74, 142.250.184.234, 142.250.181.234, 172.217.16.138, 216.58.206.74, 216.58.206.78, 142.250.186.66, 69.173.156.139, 184.28.88.244, 95.101.149.233, 193.0.160.130, 20.166.126.56, 23.201.255.110, 2.16.238.10, 2.16.238.22, 2.16.241.19, 2.16.241.8, 37.157.6.237, 37.157.6.254, 37.157.6.233, 37.157.6.243, 37.157.6.232, 44.236.102.47, 54.69.170.55, 34.218.154.77, 52.33.62.44, 44.240.29.231, 34.208.32.115, 104.124.11.33, 104.124.11.18, 172.217.23.99, 69.173.144
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, a267.g.akamai.net, uipglob.trafficmanager.net, 1261c6478a9a9c0ed2fa7ce6d52becf9.safeframe.googlesyndication.com, slscr.update.microsoft.com, usersync-geo-global.usersync-prod-sas.akadns.net, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, track-eu.adformnet.akadns.net, 1890c53250268d65cfe709175e182771.safeframe.googlesyndication.com, e9126.x.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, ads.stickyadstv.com.edgesuite.net, update.googleapis.com, static.vidazoo.com.cdn.cloudflare.net, rtb-csync-geo.usersync-prod-sas.akadns.net, www.gstatic.com, 2e5745ad01ecb0782e09eebcc467bce9.safeframe.googlesyndication.com, wu-b-net.trafficmanager.net, secure-adnxs.edgekey.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, pixel-us-east.rubiconproject.net.akadns.net, a-emea.rfihub.com.akadns.net, pagead2.googlesyndication.com,
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: Perplexity: mixtral-8x7b-instruct	{ "riskscore": 1, "reasons": "The code appears to be non-malicious as it primarily deals with hiding the 'remember me' checkbox for mobile devices on specific provider pages. However, a small risk (score: 1) is present due to the use of navigator.userAgent for device detection, which can be spoofed." }
var options = {}; var attrs = { provider: 'sbbkn' }; new OevcResourceLoader('/idp/co-branding','co-branding','de',attrs,options).load(); // Hide 'remember me' checkbox for mobile devices except for specified providers var allowedProviders = ['sbbkn', 'now']; var isMobile = (/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) \|\| (navigator.platform === 'MacIntel' && navigator.maxTouchPoints > 1)); var rememberMe = document.getElementById('remember-me-container'); var providerAllowsRememberMe = allowedProviders.filter(function(domain) { return attrs.provider && attrs.provider.indexOf(domain) > -1; }).length > 0; if (rememberMe && (!isMobile \|\| providerAllowsRememberMe)) { rememberMe.classList.remove('hidden'); }
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "reasons": [ "The text contains the word 'Passwort' which is German for 'Password', indicating a possible login form.", "The text contains the word 'Anmelden' which is German for 'Login', further indicating a possible login form.", "The text contains a field for 'Passwort' which is typically found in a login form." ] }
SwissPass Ihr Schlssel fr Mobilitt und Freizeit Passwort Passwort anzeigen Angerneldet bleiben Anmelden
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: Perplexity: mixtral-8x7b-instruct	```json { "riskscore": 0, "reasons": "The provided JavaScript code defines a function for form validation and sets up an event listener to toggle the visibility of a password field. There are no indications of phishing or malicious behavior in the code. The code checks the format of an email field and checks if a password field is not empty. The code is safe to use." }
function validateForm() { var constraintUid = { id: 'email', notNull: true, regex: [, /^[_A-Za-z0-9-,_+&]+(\.[_A-Za-z0-9-,_+&]+)@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)(\.[A-Za-z]{2,})$/, /[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}/] }; var constraintPw = { id: 'pwd', notNull: true }; return validate([constraintUid, constraintPw], 'LOGIN'); } const pwdField = document.getElementById('pwd'); const visibilityToggler = document.getElementById('show-pwd'); visibilityToggler.addEventListener('click', _=>{ pwdField.setAttribute('type', visibilityToggler.checked ? 'text' : 'password'); } );
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: Perplexity: mixtral-8x7b-instruct	```json { "riskscore": 1, "reasons": "The code is likely from a legitimate site. It checks if the user is on a mobile device, and if not, it sets up form validation. The form validation code checks for required fields and uses regular expressions to validate input. The regular expressions seem to be for password strength checking. There are no signs of phishing or other malicious behavior." }
var isMobile = (/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) \|\| (navigator.platform === 'MacIntel' && navigator.maxTouchPoints > 1)); if (!isMobile) { $(document).ready(function() { window.dp.Utils.Broadcaster.subscribe(function() { var hasError = false; $('.mod-formstate__error').each(function(i, e) { var $inp = $(e).find(':input[type!=hidden]:first'); if ($inp.length) { $inp.focus(); hasError = true; return false; } }); if (!hasError) { $('form[name!=form__invalidateUserSession]:first :input[type!=hidden]:first').focus(); } }); }); } function validate(constraints, jsLoader) { if (jsLoader) { try { window.dp.Gui.Loader.set(jsLoader, 'pending'); dp.Utils.Broadcaster.ajaxUpdate(); } catch (e) { console.log(e); } } var valid = true; $(constraints).each(function(index, constraint) { var $id = $('#' + constraint.id); var val = $id.val(); var validation = ''; if (constraint.notNull && val == '') { validation = constraint.notNullId ? constraint.notNullId : constraint.id + "NotNull"; } else if (val && val != '' && constraint.regex) { var ok = false; $(constraint.regex).each(function(index, regex) { if (!ok && val.match(regex)) { ok = true; } }); if (!ok) { validation = constraint.regexId ? constraint.regexId : constraint.id + "Regex"; } } // init/hide all var $validation = $('#' + validation); if (validation) { valid = false; var $formgroup = $('#' + constraint.id + 'FormGroup'); $formgroup.addClass('mod-formstate__error'); $formgroup.find('.js-tooltip--js__message').show(); $formgroup.find('.form-control').attr('aria-invalid', 'true'); $formgroup.find('.form-control').attr('aria-describedby', validation); $formgroup.find('.js-tooltip--js__message:not(#' + validation + ')').hide(); } else { $('#' + constraint.id + 'FormGroup').removeClass('mod-formstate__error'); $('#' + constraint.id + 'FormGroup').find('.form-control').removeAttr('aria-invalid'); $('#' + constraint.id + 'FormGroup').find('.form-control').removeAttr('aria-describedby'); } }); if (!valid && jsLoader) { try { window.dp.Gui.Loader.set(jsLoader, 'failure'); dp.Utils.Broadcaster.ajaxUpdate(); } catch (e) { console.log(e); } } return valid; } // ZU BEACHTEN: Identische Konfiguration ist auch in template-scripts.xhtml enthalten. window.dp.fn.cfg({ 'Gui.Password': { 'security': { strong: "^(?=.{10,})(?=.[a-zA-Z])(?=.[0-9])(?=.[\\W_]).$", medium: "^(?=.{8,})(?=.[a-zA-Z])(?=.[0-9]).$", weak: "(?=.{8,})." } } });
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be focused on form validation and user experience enhancements. It includes checks for mobile devices, form error handling, and password strength validation. There are no obvious signs of malicious behavior such as data exfiltration, obfuscation, or unauthorized access attempts. However, any code that manipulates form data and user input should be reviewed carefully in the context of the entire application to ensure it does not introduce vulnerabilities." }
var isMobile = (/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) \|\| (navigator.platform === 'MacIntel' && navigator.maxTouchPoints > 1)); if (!isMobile) { $(document).ready(function() { window.dp.Utils.Broadcaster.subscribe(function() { var hasError = false; $('.mod-formstate__error').each(function(i, e) { var $inp = $(e).find(':input[type!=hidden]:first'); if ($inp.length) { $inp.focus(); hasError = true; return false; } }); if (!hasError) { $('form[name!=form__invalidateUserSession]:first :input[type!=hidden]:first').focus(); } }); }); } function validate(constraints, jsLoader) { if (jsLoader) { try { window.dp.Gui.Loader.set(jsLoader, 'pending'); dp.Utils.Broadcaster.ajaxUpdate(); } catch (e) { console.log(e); } } var valid = true; $(constraints).each(function(index, constraint) { var $id = $('#' + constraint.id); var val = $id.val(); var validation = ''; if (constraint.notNull && val == '') { validation = constraint.notNullId ? constraint.notNullId : constraint.id + "NotNull"; } else if (val && val != '' && constraint.regex) { var ok = false; $(constraint.regex).each(function(index, regex) { if (!ok && val.match(regex)) { ok = true; } }); if (!ok) { validation = constraint.regexId ? constraint.regexId : constraint.id + "Regex"; } } // init/hide all var $validation = $('#' + validation); if (validation) { valid = false; var $formgroup = $('#' + constraint.id + 'FormGroup'); $formgroup.addClass('mod-formstate__error'); $formgroup.find('.js-tooltip--js__message').show(); $formgroup.find('.form-control').attr('aria-invalid', 'true'); $formgroup.find('.form-control').attr('aria-describedby', validation); $formgroup.find('.js-tooltip--js__message:not(#' + validation + ')').hide(); } else { $('#' + constraint.id + 'FormGroup').removeClass('mod-formstate__error'); $('#' + constraint.id + 'FormGroup').find('.form-control').removeAttr('aria-invalid'); $('#' + constraint.id + 'FormGroup').find('.form-control').removeAttr('aria-describedby'); } }); if (!valid && jsLoader) { try { window.dp.Gui.Loader.set(jsLoader, 'failure'); dp.Utils.Broadcaster.ajaxUpdate(); } catch (e) { console.log(e); } } return valid; } // ZU BEACHTEN: Identische Konfiguration ist auch in template-scripts.xhtml enthalten. window.dp.fn.cfg({ 'Gui.Password': { 'security': { strong: "^(?=.{10,})(?=.[a-zA-Z])(?=.[0-9])(?=.[\\W_]).$", medium: "^(?=.{8,})(?=.[a-zA-Z])(?=.[0-9]).$", weak: "(?=.{8,})." } } });
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be a form validation script and a password visibility toggle. It does not exhibit any obvious signs of malicious behavior such as data exfiltration, obfuscation, or unauthorized network requests. However, it is important to review the 'validate' function and ensure it does not contain any hidden malicious logic." }
function validateForm() { var constraintUid = { id: 'email', notNull: true, regex: [, /^[_A-Za-z0-9-,_+&]+(\.[_A-Za-z0-9-,_+&]+)@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)(\.[A-Za-z]{2,})$/, /[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}/] }; var constraintPw = { id: 'pwd', notNull: true }; return validate([constraintUid, constraintPw], 'LOGIN'); } const pwdField = document.getElementById('pwd'); const visibilityToggler = document.getElementById('show-pwd'); visibilityToggler.addEventListener('click', _=>{ pwdField.setAttribute('type', visibilityToggler.checked ? 'text' : 'password'); } );
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be manipulating the visibility of a 'remember me' checkbox based on the user's device type and the specified provider. This behavior is generally benign and common in web development to enhance user experience on different devices. There are no obvious signs of malicious activity such as data exfiltration, obfuscation, or unauthorized access attempts. However, any code that interacts with user authentication elements should be reviewed carefully for potential security implications." }
var options = {}; var attrs = { provider: 'sbbkn' }; new OevcResourceLoader('/idp/co-branding','co-branding','de',attrs,options).load(); // Hide 'remember me' checkbox for mobile devices except for specified providers var allowedProviders = ['sbbkn', 'now']; var isMobile = (/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent) \|\| (navigator.platform === 'MacIntel' && navigator.maxTouchPoints > 1)); var rememberMe = document.getElementById('remember-me-container'); var providerAllowsRememberMe = allowedProviders.filter(function(domain) { return attrs.provider && attrs.provider.indexOf(domain) > -1; }).length > 0; if (rememberMe && (!isMobile \|\| providerAllowsRememberMe)) { rememberMe.classList.remove('hidden'); }
URL: http://jaz.wxk.mybluehost.me/ch/104c5/ Model: gpt-4o	```json { "phishing_score": 9, "brands": "SwissPass", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "reasons": "The URL 'http://jaz.wxk.mybluehost.me/ch/104c5/' does not match the legitimate domain for SwissPass, which should be something like 'swisspass.ch'. The use of a subdomain on 'mybluehost.me' is highly suspicious and often used in phishing attacks. The page contains a login form, which is a common target for phishing. The overall design mimics the legitimate SwissPass branding, which is a social engineering technique to deceive users." }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 21 08:21:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.984902119121214
Encrypted:	false
SSDEEP:	48:8XBydnTwWHFidAKZdA1P4ehwiZUklqehoxy+3:8xycAOzy
MD5:	5299BA89D31BB075DF51DBD12FB2D96E
SHA1:	9BE36CD23A9F6B4CF27BD44AFBA8108B45EC11BA
SHA-256:	02D899CEAA6ABF06A0197C8AD8C310C6F615E9C0596A567D3CC49DB2B755BD9E
SHA-512:	A0CF87BB64D0B32692E9589D236114532771FC2FDFE0A2E34A4EE867A3007A7E33F14A2A357FB67CA65F9DC2E5E768345E3E8DA833A61DCDC7A17A895F3782FB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....._.7`.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.J....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.J....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.J....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.J.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 21 08:21:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.001979279355321
Encrypted:	false
SSDEEP:	48:8PydnTwWHFidAKZdA1+4eh/iZUkAQkqehZxy+2:8PychF9QCy
MD5:	207CE894D10B06E39F863BAE135ACC01
SHA1:	2F04963039BEF38154A39649E9962A3CD95C9D6D
SHA-256:	CFB89E1B1049D331888BC0FF9105FF90523223315D9D57E7AB7F52305280B684
SHA-512:	986C2B59A291687F5EB31FBFB1F95AC0169AA33814F30CBE2108231F6C32B396BE845658A5C6FE7C35B7835456639B010EBEE974815D09C63C8AB574C290D462
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......7`.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.J....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.J....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.J....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.J.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0094195193517885
Encrypted:	false
SSDEEP:	48:8RdnTwVHFidAKZdA1404eh7sFiZUkmgqeh7sXxy+BX:8DcxIn3y
MD5:	3F6EE996AED0C9A82493C2B69A1B3A44
SHA1:	2E501BFCB9EAF08E1AEF9075E7E41C7B0AB744BF
SHA-256:	51C718152F6E768FE025849FC2E3780903642BC4BC25C21F7F78FB9D9A598C26
SHA-512:	EF6EC22DA9F896137E46D12646C67EA3226F57ACED9D505D7693C7C3249B61690805AB06D35DE438AF6C0D8AFFE3D29CA950B1A84BEE7E59E3CAD2E11F9A51BC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.J....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.J....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.J....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.J.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 21 08:21:09 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.000317327048395
Encrypted:	false
SSDEEP:	48:85ydnTwWHFidAKZdA1p4ehDiZUkwqehdxy+R:85ycW5py
MD5:	B32DF3C517F0A50AE4F9B47D3477D77A
SHA1:	2A758304AAC036DAFD9DC9E7F3243903719C0E1B
SHA-256:	92CC154D915644C7D7B8565DD3736B1E835C13CED18A1319186C4F84419F1DAD
SHA-512:	7165803810ABCED79884D135AACB02718F4B8E634655177D5EA8C766F20914310876AC6E677CC57F21F6115EF0F04A344F811F6551F7124CFF89E923DA050C54
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......7`.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.J....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.J....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.J....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.J.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 21 08:21:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.987410091525813
Encrypted:	false
SSDEEP:	48:8oydnTwWHFidAKZdA1X4ehBiZUk1W1qehTxy+C:8oycYb9ly
MD5:	BD6B44D198497BBF46FCF824C8C57257
SHA1:	CF6AE628705367C9ED40AC6C60146F9FFF96F2DE
SHA-256:	EE6F8E2924E88B1F406BD6B893C1885617C6719A9779CCC4778A1A3E2109468F
SHA-512:	2D597D3452A3834DA71F1A27396A5657C99CC25DCEE1A50BD89D7A61EB5B26107DC7A0714A03D90B32DEB00F443B2F02D04B079942D87526A65E59B51E171B47
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......7`.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.J....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.J....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.J....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.J.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 21 08:21:09 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.998351009554214
Encrypted:	false
SSDEEP:	48:8lydnTwWHFidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTblxy+yT+:8lycFTcJTbxWOvTb3y7T
MD5:	1D5C9B641CDFF60E8421C8B32E8F190E
SHA1:	9EA04BBEC4F75055DA2DDC84BFBC8773BE8F59E6
SHA-256:	BAD516B062A76D5DBD0E7396E0FC69D6166DA1FEE0B41DBBAAD5E4BBCD6CA544
SHA-512:	C88E6B8E02A248F12D8EAA593D84CF85BD3A17C4206DEDEEB8717DAC77C0D5F7FCB5D7496F6948B9DFC1F797D8F36C267A0E4EEA237F524D39E68623188F897F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...../.7`.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.J....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.J....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.J....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.J.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 211

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 212

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	18527
Entropy (8bit):	7.9884263539467035
Encrypted:	false
SSDEEP:	384:h5tO8smNA5agoptNV2yZdfnQNc1U8KC7hSQpEiP+8tDQVo2kHjEQnvV:syAatNVDUqlSoRPJ5QVovjDN
MD5:	462BA13AA6012BF380F14BB6E207359A
SHA1:	85F68E5F6C34B5FB0B03B7131DB3D05DAB1B909E
SHA-256:	2CA7CFAEA176AAC0A7A0CA9BD6E031A80D15C493FC6CF67DEF4B91402E556238
SHA-512:	A4F9D9A55087920330B03C38867B3656B161C932CF898769734243AE0AE3EFE6691C54AD80680BE70BAE124F38BA59E8D8D8C5C6F3216A5176EF988BBEC34825
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2273347548520925&correlator=1539745969203762&eid=31083354%2C31083555%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDH.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=8&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283328712&lmt=1716004133&adxs=116&adys=243&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=8&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2F&vis=2&psz=728x0&msz=728x0&fws=0&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283329&ga_hid=310703479&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283320832&idt=5735&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D1%26monu%3D728x90_A1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dconsumable_900%26auction_id%3Df596db68-5d7c-4405-b7cf-44eb7f4bdc1f%26monu_df%3D0.73%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.73%26hb_size%3D728x90%26hb_adid%3D20790777227771e%26hb_bidder%3Dconsumable%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dconsumable_chrome_0.73%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D1%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=2761528121&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.P.....z.R.z.......................I.;.F..l3>.M6N.$9S@X....`.[3...fe...G.e.bQi@PTP.AI...&.e...9...~..~S...s...4S..h..Z.Cs.Z......i7.5....s9H.L>s.H...........@U7....Y...U.F.rv..a5@.. .C..k.j....c.A.H.w."..... .(Pdl...,..I..he.1,.o..i.9.`..h..?.c.z.~-)T$.%?\|.h.>..Xr..CB..4.....OQ.J..j.x..=.....Fl.x...&.......n.G.NN..C..D.......E.o....J.\|...tw:..w.;.....d.../....{.b2..u';;.~..t....qO......~l~....?7.k....x7.2...........,......ks....A.....G.m....~..>.]..>Y.)~.es...:\|...pr\|../{.AU.<9.>./{V.."...Lx.).~....>&....I2...X.[O2..%..3.W'..<....yu...T.T.MZ...Y.b.....X].~&..$Q_.. ..1:S.....\|.2"mK...}P@f.RP../.8.C.<X.I.[ ..ox.g..;.-.M.I......Y.r......^..?N.`g:.,....G...."..z..d.=\|..l.....,7...t..u..N\|{.}l.WT.&........mZc.]....b...L8.ei...iGZ7.l.y..7..V{.....8.......<.M.Z.kTK3.x..al........Hy1....".b..{.$..........n...H"....l.._.}.W.B.]..)U.b......m%.J.._....5 H.1&!.....#..`.(.\|.D.....L..qU.9.....L.aj.I.P..X.a...I...E.....N...I.......!.*1z..<...4.nK

Chrome Cache Entry: 213

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	73
Entropy (8bit):	4.493270155702426
Encrypted:	false
SSDEEP:	3:YCB9ACSdRMQE7XMIwdHr4:YCcTdNE7cIwFr4
MD5:	003290622A7198B3D640D383C0EF63DB
SHA1:	600BB3300697E4C5E5E15B264526B793CF88F08E
SHA-256:	3FFC8899ECC2573B2CC716BD79F62BCC44939A4EC053BE82B9D33F38913CC7D7
SHA-512:	0A563843002C1DE258E48949F3C3B136309E4AF20E6B09646D7C44722BEF52B88DA5399051F9951E8FED5412E3C361F3BB4F6E3A1E52C3CAC1A3C5B23ED1BF12
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/location-privacy-info
Preview:	{"gdprApplies":false,"isAdditionalPrivacyState":false,"countryCode":"US"}

Chrome Cache Entry: 214

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64195)
Category:	downloaded
Size (bytes):	490705
Entropy (8bit):	4.7654648035459575
Encrypted:	false
SSDEEP:	6144:bB8qEUC2w6sR100lUJgQjS9OYjKgabZ/lE+c:bQnlUJU9ZKgYZlE+c
MD5:	931268353E9BDAD11007B80EB2EEE885
SHA1:	53D8C0A9B371D23301A7B39FC71C90A367CD7B63
SHA-256:	F0936A7AD3564C9C5DB910F40470853C468FE20A4A1286EFFA3ABC7E9803E7A6
SHA-512:	61B26351E5374DADDBFC65B4BBF6905B5357DBBDB9B871641745234B7B0D0E295DBF579D02ED9BF52FEBCA125CB536EE8768385BD4827FC5532D0A851A5529DE
Malicious:	false
Reputation:	low
URL:	https://cdn.confiant-integrations.net/OOh3bTrtb2nHyOwGk2LTO5SWo54/gpt_and_prebid/config.js
Preview:	/* eslint-disable spaced-comment */.(function() {. var confiantGlobal = window.confiant \|\| (window.confiant = {});. var clientSettings = (window.confiant && window.confiant['OOh3bTrtb2nHyOwGk2LTO5SWo54'] && window.confiant['OOh3bTrtb2nHyOwGk2LTO5SWo54'].clientSettings). \|\| window.confiant;.. var integrationSetting = {. config_ver: '202405210400',. integration_type: 'gpt_and_prebid',. integration_version: '202403121239',. exec_test_ver: null,. };. function defaultCallback() {. console.log('Confiant: ad blocked', arguments);. }. if (clientSettings.enable_integrations && clientSettings.devMode != 2){. clientSettings.enable_integrations = null;. }.. var adReporterConfig = 'undefined';. try {. adReporterConfig = JSON.parse(adReporterConfig);. } catch (e) {. adReporterConfig = {};. }.. var settings = {. propertyId: 'OOh3bTrtb2nHyOwGk2LTO5SWo54',. adServer: 'https://protected-by.clarium.io',. confiantCdn: 'cdn.confiant-integrations.net',.

Chrome Cache Entry: 216

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=c992f38f-79ee-483b-a206-98cc8db521aa
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 217

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 218

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	411
Entropy (8bit):	3.739498179068472
Encrypted:	false
SSDEEP:	3:YMVFt+KpJHJjLTDobNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5MJhwjZSgClQ6aaaa7:YKHjzozz/iJhESgC5r3
MD5:	31945394B41AF2DC3CB99B8D43761B5B
SHA1:	DD10C33565157E59B723B726CCE0C23BCE8D3215
SHA-256:	25883B674AFF6C2048637A22748B87055BBD80EAE70B534852A97369E15DDE9D
SHA-512:	A77CACA0D2B036C61F89A8DD87CD522D456D5B9A9F467422D140A1087685F1213A5391E78529DB4F55D4CE82F3EF94A27DF879F445A930229CC329C7E9193B21
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=1557359031084804&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=12&sfv=1-0-40&rcs=2&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283311248&lmt=1715994881&adxs=330&adys=1946&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=5&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=300x0&msz=300x0&fws=4&ohw=543&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbRIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=Flight%3D1%26monu%3D300x250_B1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse%26amznbid%3D2%26amznp%3D2&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=4216580245&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNue5sm1noYDFfOHgwcdB5kwSA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"9",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 219

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 184065
Category:	downloaded
Size (bytes):	34961
Entropy (8bit):	7.986023789575727
Encrypted:	false
SSDEEP:	768:DbOpaOcZEGUdoUwXCD3pI0erLIct7be9igAGEQoLqwTMcqaGV9:esOgERoNIW9orEOwBGV9
MD5:	589FAB0E99EBEE73C97AA20C77E119E2
SHA1:	2E9B6F551AC1A7B325AC86D69EB8B859FB572134
SHA-256:	68F7624815EE3B0754B812BAD97AA0ABDFF85A12A9B71838A3B2BCFE5E577AD2
SHA-512:	622FB064DA5567773A0F5B6A0238B4B13653E07B62FAF887F9702C843B3510888A4164105B87DF567ACABA749D2AE6F97B7DD4C87C6EBED5324F0A4A59972DA3
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/ch/104c5/css/sso.min-20200819.css
Preview:	...........i..8.-.W.......I.w...;.f.Y..g6..4..$Q..,...!....................r...s.E....7o.'"IH(Q.~J0...\.E8.Q(9=+.....w.k..IRU=s.1a......a.]F.....K.,.$..D..~......wn..h}........v.......'..\(.Tp{..&....f!..w.......!.>.....J.zs{M.:.....\B .^.0(....Z.lM.#QvF...D`.....%.w.V_./vv~u...^..P....8'....WX.(P..v..T.Z.Rk..~zm..^.{....7.`......Y;tU...}.W>..Y.e.8_`.i......X..g;.Wi`...X..P..&.z..E.\|{.\...T[o..nz^.....tr_./3....sRr..@D.8wxv[..vy.k'.....Fv.F.63'F<.........$....W.........?..........u.?.....I+P.....6.....m..M]6...9.:..i....$..}.?0....O+.7......z....Qfp...s.z..p:y..].tzi~.-..i.P.......m.w[.....G..}.d....l\|..n........I.._..`z..L.O'.o.......{a....f..........Y.uU.w[.u..F.......v.N.x..v.\|a......0p.....O;........z.....a.p..s.z.<.z...$.X.+..O.P.....1m.7..:........u.X...'.8..X..{./;nI.........Q..a..7.Q....u..A....-......>k......_g..~6`./..e....i.%~y....v......~..l?Z6....\|O.6.A8.=~...o.....1..(V V.....&.D..=......E..\....;KE..

Chrome Cache Entry: 220

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.35819143106914053
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 221

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=c992f38f-79ee-483b-a206-98cc8db521aa
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 222

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64980)
Category:	downloaded
Size (bytes):	200640
Entropy (8bit):	5.251337755994421
Encrypted:	false
SSDEEP:	1536:UsnCMJfWwy/4KxV86qv566IrnPS6dzSRBZ9vpx2Y8xgmiDaaJt0PSsUYW4WWIR83:MMS/4y86qv5grPd6RknidP4W4Qy2i
MD5:	E35194AEF9B10EB61FEFB7B2CF45D4FD
SHA1:	1D38C0A5F3D7F6945BDCBA4FAFF16D21165A60CD
SHA-256:	8BCD7F7C00DC1726620982243DBD44C449CFE6ED8EF453F259F9792E57F6688B
SHA-512:	19B6BC9D95334ED8DEE9A18939419EC779006022EF30506A37A673D69F4FBF4ADD44DD1E432FA160D563B529381C49127956BCDB8B8957F29FCB0C0217213D97
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012405101652000/amp4ads-v0.mjs
Preview:	self.AMP_CONFIG={"v":"012405101652000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate":0.1,"ios-fixed-no-transfer":0,"story-ad-placements":0.01,"story-disable-animations-first-page":1,"story-load-inactive-outside-viewport":1,"amp-sticky-ad-to-amp-ad-v4":0,"story-video-cache-apply-audio":0,"amp-story-subscriptions":1,"interaction-to-next-paint":1,"esm":1};/AMP_CONFIG/;.(()=>{var t,i=class{constructor(){this.j=new e}abort(){if(!this.j.C&&(this.j.C=!0,this.j.N)){const t={"type":"abort","bubbles":!1,"cancelable":!1,"target":this.j,"currentTarget":this.j};this.j.N(t)}}get signal(){return this.j}},e=class{constructor(){this.C=!1,this.N=null}get aborted(){return this.C}get onabort(){return this.N}set onabort(t){this.N=t}};function s(){return t\|\|(t=Promise.resolve(void 0))}var n=class{constructor(){this.promise=new Promise(((

Chrome Cache Entry: 223

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKoi:8WiIUemo/HPbfCYKpY4DowuqMr1YSoe6
MD5:	4A8D7F7C32C224838095E9AF3570C0B4
SHA1:	6FC1E98722EBB57EC2A66D97E6E11E3CE8A35B7B
SHA-256:	735B5ED4EA976F12906525667F31FE134BC1CBF623C75F519723ADEA54131F4B
SHA-512:	5E10FA924C95CB26514047F1D3DDB1E32CB38E5B1E37FC3CD54E93B0C6761598D75C9F0200A532F7436362AA0683D7785412175F2966FB474092CE98DAD2B9F6
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=7&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"7"})

Chrome Cache Entry: 224

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.97177460040716
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoenM:8DIGoXbfCYKpgrlywuqIQWOeM
MD5:	64F8E13218319CA6A9A5CFF567D5E339
SHA1:	24697A44FFFE9ACB1FEC0601B22FCCC2C1A2CBC5
SHA-256:	74332A01755365C1B86AFCD5273F59CC9FCB374660075C5EAD8AE09B7A226B9E
SHA-512:	A4D0A8AD415877DDD09C422D264FBE0D9F944761CA521DCC6CBEDA926DCFC9CC592D210A13F6EEB81F1BFD70B493D08240C0AE38D5735B75738F17E1809A22CF
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=1&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 225

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7374
Entropy (8bit):	3.7087999020258615
Encrypted:	false
SSDEEP:	192:1w1xe9KNd07c0Zsg2/ZX0dRzVO0Zfv4emqb9Z+siAtz6oyQg/S:uc9y07/Zsge0dRzzZYebb9Z+sh9yQp
MD5:	795242580BFA3135028BD0750FDC1654
SHA1:	2C344B6662E62DDBDBA49F635E1C33A827FE75D4
SHA-256:	DEEEE170C3759A6ED35C0C05C5B935D0E7638F1C0C5677166918ECFF6EDB1909
SHA-512:	09CF57EA5F0FC9778DCE5578718E2B2DB960D145BEC1AFCE58B6BA0B1670FF4E31B91B3CB69EAB0004E72E193B4D0F374A13F5C8D96A79902A96F5C72A65054D
Malicious:	false
Reputation:	low
URL:	https://www.swisspass.ch//resources/img/logo-20200819.svg
Preview:	<svg width="152" height="24" viewBox="0 0 152 24" xmlns="http://www.w3.org/2000/svg"><title>SwissPass_Wortmarke</title><g fill="#FFF" fill-rule="evenodd"><path d="M2.75 18.86a4.87 4.87 0 0 0 1.59 1.9 6.66 6.66 0 0 0 2.4 1 13.64 13.64 0 0 0 3 .31 8.36 8.36 0 0 0 2-.26 6.86 6.86 0 0 0 2-.82 5.05 5.05 0 0 0 1.53-1.45 3.69 3.69 0 0 0 .61-2.14 3.12 3.12 0 0 0-.44-1.67 4 4 0 0 0-1.13-1.19 6.62 6.62 0 0 0-1.53-.79 14.77 14.77 0 0 0-1.64-.5L5.93 12A15.13 15.13 0 0 1 4 11.36a5.56 5.56 0 0 1-1.66-1 4.83 4.83 0 0 1-1.15-1.61 5.4 5.4 0 0 1-.44-2.28 7.31 7.31 0 0 1 .32-2 5.42 5.42 0 0 1 1.21-2.09A7 7 0 0 1 4.71.69a9.72 9.72 0 0 1 4-.69 11.52 11.52 0 0 1 3.25.45 8 8 0 0 1 2.7 1.35A6.7 6.7 0 0 1 16.47 4a6.67 6.67 0 0 1 .69 3.11H15a5.36 5.36 0 0 0-.6-2.3A5.19 5.19 0 0 0 13 3.2a6.1 6.1 0 0 0-2-1 8 8 0 0 0-2.3-.33 9.54 9.54 0 0 0-2.17.24 5.42 5.42 0 0 0-1.83.77 4 4 0 0 0-1.27 1.4 4.4 4.4 0 0 0-.48 2.16c-.013.48.08.958.27 1.4a3 3 0 0 0 .76 1 4 4 0 0 0 1.11.68 8.28 8.28 0 0 0 1.34.42L12 11.33a16.5 16.5 0

Chrome Cache Entry: 226

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.063533128617405
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCfSMn:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr1R
MD5:	C9F83D63DB4DDA37F821FC0171DDDDD5
SHA1:	63FD39FD9BCB3B0AFA6832F3CC2D492E64EF2580
SHA-256:	AD9B7B57944CA3F6B87C324818DDC08C9F7108AB9C0B33422AC8D1F17C261F42
SHA-512:	EF6DA0009DDBAFFB6373384CF2E2E49898B13E7345BDDC766D418E3B5FF50EA817D5928B1C3338BC9F5D17E033E0C5B280DEC492F68F22889DE0E99EC4DB43A1
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"11"})

Chrome Cache Entry: 227

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	downloaded
Size (bytes):	69639
Entropy (8bit):	4.869426023874478
Encrypted:	false
SSDEEP:	768:0TXCWV2NXw73l8bMe244M7iSKtXPsgn88siVuGi8ZVL0UjiA4YAMf6XeAqthmrM2:0iNAAAPjmOGv9isR
MD5:	0A65E43F87B9AC1B8D2CB56646206390
SHA1:	9744808FCEADEA589A5496A45DA53D925106B996
SHA-256:	8F60C8E46FF2161132091C8BDAF0628C161918A67A1D65854C21BC6BDFF7EB91
SHA-512:	42337730D48F86D401E0E309C75EE0F3B29A451A41217B783171A856E83FEA6689394960B690419689A2487668BC9606624D293C41DB61D3C59957DBEBF74026
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/iquid-01.js
Preview:	"use strict";.function _typeof(t) {. return (_typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(t) {. return typeof t. }. : function(t) {. return t && "function" == typeof Symbol && t.constructor === Symbol && t !== Symbol.prototype ? "symbol" : typeof t. }. )(t).}.function _createForOfIteratorHelper(t, e) {. var n, i, r, o, a = "undefined" != typeof Symbol && t[Symbol.iterator] \|\| t["@@iterator"];. if (a). return i = !(n = !0),. {. s: function() {. a = a.call(t). },. n: function() {. var t = a.next();. return n = t.done,. t. },. e: function(t) {. i = !0,. r = t. },. f: function() {. try {. n \|\| null == a.return \|\| a.return(). } finally {. if (i). t

Chrome Cache Entry: 229

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5301), with no line terminators
Category:	downloaded
Size (bytes):	5301
Entropy (8bit):	5.606894422457563
Encrypted:	false
SSDEEP:	96:C2Bqb3oreTOT2Bqd2BqhhbCsyjeDgFS5LX3JgwCTdCbyf57zIn1bIKM7N2xGq:DBqz3BqcBqJDjA5g1UhA
MD5:	31918C85E6EFFA2AB92B713687279BC1
SHA1:	A33483A33DD35B8DC0AE2747C0EDB161836763AD
SHA-256:	66BFEB3ECCF20E94B6F9C2B89A1980280D7BC9FF5EABDEC72B29008D6EF14A26
SHA-512:	F87851B0C21921645B9A996C1FF59E4C76A41C99FFF1A21AC8075F3DCCD274A1076B0F13E0AEFF0B833D3A78C32FF19C5D3E3FCD5EB1E942591E97246DD1B232
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10602318&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=nGTKIVCtRNGap08rpG0XGw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=OUM2NENBMjEtNTBBRC00NEQxLTlBQTctNEYyQkE0NkQxNzFC&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&pig

Chrome Cache Entry: 230

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24576)
Category:	downloaded
Size (bytes):	27410
Entropy (8bit):	5.3118163054791925
Encrypted:	false
SSDEEP:	768:ZW/IKeMtCGsOUdfz4wDQjZvy/2QWwY4RXrqt:Z6fztCGYxDQjZK/2QWwY4RXrU
MD5:	3E51FF977FE9268FC4D16C2A4AAD4488
SHA1:	41D1E7592D8EA999C41C7696A40FA0AA42749D22
SHA-256:	4CE21F96748E9468DEB697B38AB847CAA27F0F47E2862BDE1B3F0BA4BA24E855
SHA-512:	24EA33333533CA7CE72B988EE70AFAF4CE3862753CF8F4CC66333ACAC19A5BA68E0C69098D1AAD3DF0C0F0A3F911B2B66DA6CE2F856F360A413E2C33122B924C
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=10&cv=31&https=1&cid=8CU44QH1R&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=APPNEXUS_EXPERIMENT&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"10","lookup":{"g":{"name":"g","time":14,"cookie":"data-g","urls":[{"type":"img","url":"https:\/\/cm.g.doubleclick.net\/pixel?cs=10&google_nid=media&google_cm=1&google_hm=<encb64vsid>&google_sc=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}","eu_url":null}],"pvid":77,"isBl":0,"g":1,"cocs":0}},"ussyncmap":[],"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd","yie","mgt","tst","ats","pts","mdn","mts","trs"],"bSize":2,"time":30000,"ngGroups":[]},"log":{"successLper":100,

Chrome Cache Entry: 231

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1791), with no line terminators
Category:	downloaded
Size (bytes):	1791
Entropy (8bit):	5.330942715816493
Encrypted:	false
SSDEEP:	24:kRoBfiRYIqSYckSnDjSYbpKBG6FSPNSYmKOPgEoIYSYKfwSYmSYDBSYwASY5IbU/:koBfiRYjckSN9KBpKmRFo5emcDvhWut
MD5:	783CE0FD4FBDA5B24407B46B29BCBFAC
SHA1:	8B37B9E72F79571CCE100FA7FB0108E80911611C
SHA-256:	D8AA94554F6F4FA7215532F628BA0E964FEB079674DBF722E84A33DDD9650909
SHA-512:	3762EC32DD52C7A7F85FE153DE1D80A234CA2B88DF4778BECBCF7E63F5E125E0309282787652E6B90214C99C5740059180676E0B194B6E451BC1AA908125E971
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
Preview:	<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZkxnuNHM6HMAAHezAHb--QAAA9cAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZkxnuNHM6HMAAHezAHb..QAA%26983&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZkxnuNHM6HMAAHezAHb--QAAA9cAAAIB&gpp=&gpp_sid=" style="display:none" width="0"

Chrome Cache Entry: 232

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	25444
Entropy (8bit):	7.98988054251647
Encrypted:	false
SSDEEP:	768:pJ/pTcnCTj2cU96cyZ35YoQAWPe4vCcxd:pzTcnCv4yHQAWWhcxd
MD5:	586ECB7D14646948518E43C1A5F3664F
SHA1:	AE2FBC1925B5110D0E8AF23F28553BFFD82B7812
SHA-256:	0E6BC19FF17AFAC1E5968426EE64441E6D3E412C502605774B8C4EE3E556564E
SHA-512:	678398792D94D962FA6247CAE50795CB3EEB639FAB4A66623A8DA341ED8E843234A78E4FF8D5A954AA27239D732501ABE3E997EE78D7FFEDE1E234DC684DA659
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=833517662015268&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=160x600&ifi=5&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342280&lmt=1715994881&adxs=1095&adys=446&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=160x-1&msz=160x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D160x600_B6%26slotNum%3D1%26placementNum%3D2%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_700%26auction_id%3Dc8007fc4-7924-4fe8-a2a7-041ec5dc1cde%26monu_df%3D0.07%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.07%26hb_size%3D160x600%26hb_adid%3D23523a31da715195%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.07%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=222636669&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	S..13hV.....^.z.Tgb...........b.............tU[.pJ.Y.i.w....!2..1..M...U?.W.+..^dvv.x!.....P...M..u..g..V.......uH....\|.!..nVB...9.....po.<7..@6...q<.. .[0...Vi7H.kmv..0.... ......o....x...&(V.F[........ ..PZ..M....ZIk(..f=Hi.8.d.8.:..].36.p....,.8t&. ..pu^....igch..n.X.)..E6.W....q..l..."......%v+}....@@....8s2V...9.z.[.......x....vn.]z''...q.D.F......:m>.m.tr.....>S..`o8..........G}..;.....td.....`.........p./.}(6...K&.......\|.o.z/O...\%K.3s6{..z.O..._a.>......k.h0_............=.u._.O..n...4.{.......J\...N..>9.oI....e..WHx.L.^.0.....9n5....w.Q..7.6..=<..^...Q%...WX._.\|.e....?e....3..;..=.n(...%..wIE...?...5...`..:.3..,+mTu....o._.8.M..Qm<G.8N.jYj.&.%..c.....,....w.K.U.w.tV.A.K..(#..[...1....(....I.UvS\{.n..../.............fr.Df<..#... ....u.E.....B8...La..!.j...R...VC..9h...c.mg`;3O..t`...C.gg..<.j#.ie..C...K .SkY.r..>.......x.)72*.......'~b..3UYU.jJ.5.q.[..h.=..h...........8-.X..q..qq@..2./..z..@HKJ.8.....=...$.i..M..(R....e~F.qT.i.L.s

Chrome Cache Entry: 233

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=2
Preview:	Not Found

Chrome Cache Entry: 234

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	175658
Entropy (8bit):	5.226482359919928
Encrypted:	false
SSDEEP:	3072:XVBkv2lyNwJ/gCWEZVxZGKBM0nSysQ0cY+F2eSb7JcPg+JVhNI6mzMAio5E1L+:XVhQmJ/gCWE/GKG0nqcY+F2e8JGJVhN2
MD5:	18B504BE4BFEB652CAEB580A5B0330C3
SHA1:	517D2728CE6C0320805B53F821407F8ED5DA138F
SHA-256:	243AE75154F0AF5D9548B77F704A3C33733331E305108B810620B52C7F339CA2
SHA-512:	FA52EE8BF276554E0E5E8C58B62E8EF920CD011E9E189FF8A205A8BF71EED4502262180E7CD3D56217982E844D374A061C9EE2859B18952953C5153531D38667
Malicious:	false
Reputation:	low
URL:	https://static.vidazoo.com/basev/wgt/odin/1.0.14/widget.serverless.js
Preview:	function a0_0x85e0(_0x4a9078,_0x42bb0b){const _0x433eaf=a0_0x433e();return a0_0x85e0=function(_0x85e0bd,_0x575f3b){_0x85e0bd=_0x85e0bd-0x1ac;let _0x4a474f=_0x433eaf[_0x85e0bd];if(a0_0x85e0['BEfSPu']===undefined){var _0x1af7bb=function(_0x2db441){const _0x2c5e9f='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x251fbd='',_0x2eed4e='';for(let _0x1f6ae4=0x0,_0x45aa76,_0x5ab8fa,_0x3ab72d=0x0;_0x5ab8fa=_0x2db441['charAt'](_0x3ab72d++);~_0x5ab8fa&&(_0x45aa76=_0x1f6ae4%0x4?_0x45aa760x40+_0x5ab8fa:_0x5ab8fa,_0x1f6ae4++%0x4)?_0x251fbd+=String['fromCharCode'](0xff&_0x45aa76>>(-0x2_0x1f6ae4&0x6)):0x0){_0x5ab8fa=_0x2c5e9f['indexOf'](_0x5ab8fa);}for(let _0x5e9e92=0x0,_0x38ed29=_0x251fbd['length'];_0x5e9e92<_0x38ed29;_0x5e9e92++){_0x2eed4e+='%'+('00'+_0x251fbd['charCodeAt'](_0x5e9e92)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x2eed4e);};a0_0x85e0['jsGTWP']=_0x1af7bb,_0x4a9078=arguments,a0_0x85e0['BEfSPu']=!![];}const _0x2be2f5=_0x433eaf[0x0],_0x36cbe1=

Chrome Cache Entry: 235

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	4.9971848342210725
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKo2:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeO
MD5:	CF5E7E792CF809593FA7E185285D447A
SHA1:	CCD0523140FBD80C0E611CAD9B958F2C97F1F67E
SHA-256:	2CCAB914AD9DA56F6CD602E44947518499FBD5E97EEE9E5A4A29B64C851AA694
SHA-512:	D1A715A72398C986A7EA4CCED2ABBE61E99D7B4188FDC45E8AB20518B0174E150BAD9184A593D5FE453D7E9C28180A784239041E23375A3574FAF91B476C846D
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Chrome Cache Entry: 236

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.012188403968661
Encrypted:	false
SSDEEP:	3:qinPclnY:qyP1
MD5:	52735E774773D5DBF7743F42708405E4
SHA1:	FE95F1ECBEF580B60ECEB0FEE6BF3D928386931E
SHA-256:	7168971E3697B04C7BBE8787AD167C30E2765826ADA1A9F12E95F2B86138D117
SHA-512:	498838946B15B8F89BCF7C319342461F0F928DB407730DEF2D694D3FCA6E54B2269B288DE5C630A2E17143DB37232D2BC3D002863A106E788C03D1A2A33D05C3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwnnl2gL4-CUoxIFDYOoWz0SBQ2QAKnG?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw2QAKnGGgA=

Chrome Cache Entry: 237

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15562), with no line terminators
Category:	downloaded
Size (bytes):	15562
Entropy (8bit):	5.496522114175185
Encrypted:	false
SSDEEP:	384:ikBy6l6J01yJyFusH/4dvZbxZpmM+4fCVTomdNo0Pwk:TIq6J00JyFtPd2U
MD5:	10DA3249009C676657093E9537DFFF17
SHA1:	51BE73E8597BC74E575A40CE0C388D9A2F90E3BE
SHA-256:	326B658D124E7D0C26F4B8F2B76D2B814494E4E984801A45FA7B573F1022AC97
SHA-512:	FB40E54D373E6CB1ABFC32D6080B5C5B720012F3BFF76A6FE53E220592F1EF98AEC35C3E757B469AC126A459723A3BFFAD6591CDAD761ADC156D65CD06056C73
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156972
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,az=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aE){return typeof aE==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aI,aH){var aF=0,aE=aI.length,aG=false;for(;aF<aE;aF++){if(aI[aF]===aH){aG=true;break}}return aG},n=function(aE,aH){var aG=aa.document.createElement("script");aG.type="text/javascript";aG.src=aE;aG.async=true;if(an(aH)){aG.onload=aG.onreadystatechange=aH}var aF=aa.document.getElementsByTagName("script")[0];aF&&aF.parentNode&&an(aF.parentNode.appendChild)&&aF.parentNode.appendChild(aG)},aq=function(aG){var aF=aa.document.createElement("iframe");aF.src=aG;aF.style.height="0px";aF.style.width="0px";aF.style.display="none";aF.height=0;aF.width=0;aF.border="0px";aF.hspace="0";aF.vspace="0";aF.marginWidth=

Chrome Cache Entry: 238

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 239

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.613439903612078
Encrypted:	false
SSDEEP:	3:rS8AI+DgWTrMTPVVGWaDn4+w26ennYFDOqJJvWyriDmsa6q:zAoWTrAk7g9ennYFDzHvW47T6q
MD5:	C3536E9EA3CAF771882CF874FC86C65B
SHA1:	4D9A7CBF9D4E0382BD8D6C6A08FC1AA5240AED15
SHA-256:	E5AA7C1BE9FA24BFBE93A3ED0A8042194BE508733E9F61659FD0B21146AC87E7
SHA-512:	57F411A25BE16A12C50927D53AD97599FDAF48FABAFBCADA044858DEBBE4041513ABAB9793CBA43E1119BC964F1FBA29B0BE21A27EC6CDE72A0288004BE6573C
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=102292325056830&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=160x600&ifi=13&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283332913&lmt=1715994881&adxs=8&adys=446&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=a&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=160x-1&msz=160x-1&fws=512&ohw=0&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D160x600_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26amznbid%3D2%26amznp%3D2%26bidder_responseTime%3Dkueezrtb_700%26auction_id%3D2a6da4f8-ca55-4d6c-8f58-cae82a59662a%26monu_df%3D0.14%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.14%26hb_size%3D160x600%26hb_adid%3D46279835da4a8ab1%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dtrue%26refresh_count%3D1%26lre_rc%3Dtrue_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.14%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3703167312&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	....D....=H..!...j..a`.O.......;..D~$j..u1.qy.>..)y5:.K..B]\|APT..H.#.T%...R?...K;y...s.?....zLz..C!Z........Xb../..Y4;e.'0N..n..w.

Chrome Cache Entry: 240

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 241

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKog:8WiIUemo/HPbfCYKpY4DowuqMr1YSoe4
MD5:	C01529B769EEC119E28CA6136CA8AC10
SHA1:	D5F32A72C121F467674514B69BCA53D9EBC37535
SHA-256:	B56E939078ED1562539FE7047463A772987604CCC3A7EE27C04A770EC6347647
SHA-512:	A9E3371FF7B697A19884E705D4604511EC7EDE7A1FD5F5E647F68DA954799B857EF54574AD3AE1B640B5174273F842142634CCF0139331DDD141FA3E37A56472
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Chrome Cache Entry: 242

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	6.5362862311688765
Encrypted:	false
SSDEEP:	3:rt9mR2sgYRkPclv95tUgcQnOR6yIespTh+206cn:h9mR2lqkOncQ+6yIfThJ0Nn
MD5:	8E221BEDBC98D18F1C9248B135BF0A1B
SHA1:	8159245442D16BADD550DCD735DA85B9A9557731
SHA-256:	567219EFD2DA319B6083BD33DC86A4B51D4C29755A74F5EFAF2F83B68D0D7A48
SHA-512:	2C7CCF4B9CEE54A1072CFC7F42B89C8CCF657B72B925507468D31F76BF399A84A20F8C3BDC92F50D67691BCFA1470D6C4DC47B21C0846142EC12715A7E56DEA6
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=2989487729194744&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=160x600&ifi=4&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342267&lmt=1715994881&adxs=8&adys=446&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=160x-1&msz=160x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D160x600_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_800%26auction_id%3Dc4b5b8b2-78fa-4182-b7ed-7c1240ce59bc%26monu_df%3D0.07%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.07%26hb_size%3D160x600%26hb_adid%3D233e34af3a17edb%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.07%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3703167312&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	......\}%.O`bm.......G.X..4........c:....\|A.h.a.2.I#...0L....\|A..MN"2..Qe.-@(.3.W....u.4_.C.9&L.....p.....m9k:..a.(f....P...Z..=-'..._Q.

Chrome Cache Entry: 243

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.3701101614914333
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 244

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 53044
Category:	downloaded
Size (bytes):	17053
Entropy (8bit):	7.987673736308582
Encrypted:	false
SSDEEP:	384:XQrDFyKFRXQQ5pGG913BahobGGOal+0HuXpAWBY:grxyUKQ53pdbGg47PY
MD5:	9C6B5CE6B3452E98573E6409C34DD73C
SHA1:	DE607FADEF62E36945A409A838EB8FC36D819B42
SHA-256:	CD729039A1B314B25EA94B5C45C8D575D3387F7DF83F98C233614BF09484A1FC
SHA-512:	4CFD6CC6E7AF1E1C300A363A9BE2C973D1797D2CD9B9009D9E1389B418DDE76F5F976A6B4C2BF7AD075D784B5459F46420677370D72A0AAACD0BD477B251B8D7
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=0&seller_id=2794&pub_id=2380813
Preview:	...........kw.F.(.}...w6..6e.\|."..e9...d.a...........,...~....)Yvf.3..e%..._U.........~..hg._,..5P?a0..'..4...O6K..\|'...y%.?.O.....Z...Y.%....WA.....J......p.O.4.Wi...{..$.>..8&....eo.c2.w{w..r,4..K'ReY..s....6L.].w.s...x...s.U.2.W...^.=.#..{..,....2L.......E........y/.s...C..bQz^...l....4YV..w/ON.4.......}-n.2@.r.....j.V.\v_..t.f.L..m.....Q.jX.:9.`...VCE....-.$.T..1....L!.e.e.fi.....K...../....U %X-.J..b.9...e.....=KR..h'.^.@i./bz.0X.D..n.4.../.....q..Mn..v.!L.{..w.-...._!....>....D..(Qt.&y...[....X!K..,.u\...........{..z.....Y....RJ2mc..Q.w..ip...'..<..2.>....}... .."M..CN.X.d.h...Az....T..~.....\|....8......\I.Aq..G..4....w.t...pP.\..\|.4......}...0p#'..3..Z....N......?>[.m...{.9.Gy/..V...vd.....9.4d.{G.M.-A...*...Y!....y[=....V&.#......K..5.7.. .....Z:......;[.y...U.1..#..>..e....(..q..A.....q..d..8R.(J....R..e4......O..Duvw./ ./.[.3..+.gA..\^.o....u....C....<....=...Q......iM..i...Q...!..b.....3.%6.}.D.1..P...o.^%....<". ..0.

Chrome Cache Entry: 245

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 246

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 247

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 248

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 249

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46384), with NEL line terminators
Category:	downloaded
Size (bytes):	100549
Entropy (8bit):	5.397364935838252
Encrypted:	false
SSDEEP:	1536:ipeg22HisliUTny3tjq6C+VLJ+xssNCMABN5J92E:a22CnUbutjztONCB2E
MD5:	D3931F95DA933F2F9B6DA3C6A4AE7C3D
SHA1:	64A0001C58492CFBBE5FD7DFA560AF23D551B90D
SHA-256:	EC516DC31A72EC6F2D2E01D6A4E5E38D0AA7E6D4E687DEAEC53E772089A022CF
SHA-512:	DDF5E4E27A2995DA753EDDC31C0AF305C4DC838E2D1AE81251E1936DB2BCA02F28CEF5A688650B3E1C740B48DA4A7D0F7E245BF48C5739DB1DF2AA23AF000D71
Malicious:	false
Reputation:	low
URL:	https://d-code.liadm.com/did-004d.min.js
Preview:	!function(){window.liQd=window.liQd\|\|[];window.liQd.push({"globalVarName":"liQd_did_004d","distributorId":"did-004d","defaultEventDelay":1000,"identityResolutionConfig":{"source":"did-004d"},"identifiersToResolve":"_sharedid,s_vi,trc_cookie_storage,gup_anonid,_li_uuid,hid,_parrable_id,tmguid,ajs_user_id,globalTI_SID,muuid,dtm_token,_shopify_y,_pubcid,IXWRAPPERLiveIntentIp,_aalyticsuid,s_ecid","contextSelectors":"title,meta[name='description'],h1,link[rel='canonical']","contextElementsLength":5000,"resolutionSync":{"enabled":true,"strategy":"ls","targetKey":"__infoLinksLIResolveResult","resolutionOptions":{"resolve":["nonId","uid2","index","openx","pubmatic","magnite","bidswitch","medianet","sovrn","connatix","thetradedesk"]}}})}();!function(){"use strict";var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function e(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default

Chrome Cache Entry: 250

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 736x729, segment length 16, comment: "Lavc60.41.100", baseline, precision 8, 162x92, components 3
Category:	downloaded
Size (bytes):	5636
Entropy (8bit):	7.483458746760552
Encrypted:	false
SSDEEP:	96:HN26MT0D5MdtbZPAVwzVvj9NLaIiku1DpjP7A/L0Ffk5wgPEE:yYNMtKw15N2Mu1DpjP7qL9EE
MD5:	EF562E7F34FF8F50192C0787BED21189
SHA1:	1AC638E3785F92649E83EC322B4FCD7A33B94132
SHA-256:	DCFF47D208B7EB3056EC8BE44BDD9D394E83753082CD9898DF09975CCB64FD9A
SHA-512:	DAEED46A612CC500476B14A7AA0CFA07F219B077EC505944D4462B0F86C9A0D4A8A4ED97A6772B14EA99FFE60D3268888B8EC9F53F2995A63B982C7633FC980A
Malicious:	false
Reputation:	low
URL:	https://video.primis.tech/uploads/cn1/video/users/converted/31637/video_662121c76b5c9269110138/vid664b1f85041d9344782263_thumb.jpg?cbuster=1716199311
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 251

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5630
Entropy (8bit):	5.1607682657744585
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNIrR79PaQxJbBVJq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNIr59ieJBv5
MD5:	B5EB462A5E486F7AC34BFD301C9AC9D9
SHA1:	791DA1B32A990DA3A47FE6ED9187FE3F2191F332
SHA-256:	04B51024946D8BA7A4B3EFC9BC738A15E95FCFED6B5A1B099707C2D1353FDE3F
SHA-512:	163BEA218F904A0F68CDC3A008CBCFD37C3A381FF0576EBDD6BC272747377523DC3363C17062729986C9F21853BA8CAAFDEF1B78DBAB10571149A2850AD0795A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 252

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/cookie?partnerId=appnexus&userId=6403784576581203868&gdpr=0&gdpr_consent=&us_privacy=&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 253

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeoM:8DIGoXbfCYKpgrlywuqIQWOeoM
MD5:	4729D992780A2C16CEDD377037B32FA3
SHA1:	F84DF5BB801F10ABD274F2DF1CD9CEEF3C96AF12
SHA-256:	F6E97791F8DCDB867599FD951909CA761D7EE18F33AA35D71818AAF58D84BA1E
SHA-512:	259504FF963D4F93AFB79A58F05453E3212BD01C2D08FE60231EBE43E29E8D60D3B47C46DC54590837A86E72B9F87F8BFEA0AFE31808A087972C77BF51F89671
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 254

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	402
Entropy (8bit):	4.850637469300643
Encrypted:	false
SSDEEP:	6:YAdiZL+WRSafY5X5gMfAA4m3jvKAmE1bG4CaPtt3PRAD3PUJxaPRU:YqiYWRSafoJfAAJ3jvKAF1bG4vRSUypU
MD5:	39EB042F92CE61B99D9FE1ADE98B4626
SHA1:	8B0F3540FF18572E2000C3176B1AE1193EFCFE65
SHA-256:	1A614BDE5E0314ED82957C65A6B0BC9E3B1C5AB17B9817B40D0FA3884D3748AF
SHA-512:	06C41EC974693AC0897874366885033F050E7B4D58504FD63EE06FC67F1D6DD8B4C63F842BA86EB54D8C72B66FC5DD315F033AEDD6413D277F0E2BB0FA93BA78
Malicious:	false
Reputation:	low
Preview:	{"error":{"code":"request_format_invalid","message":"Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.multiplexFetchV3(io.id5.fetch.request.web.multiplexing.MultiplexingFetchRequestBody,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)","type":"invalid_request_error"}}

Chrome Cache Entry: 255

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7bde16b5-414f-4c99-b45a-259240a801e0
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 256

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65534)
Category:	downloaded
Size (bytes):	96782
Entropy (8bit):	5.288060407493842
Encrypted:	false
SSDEEP:	1536:1S31uKSB9ZLsF0Txb7uF0gfI90ttNk8WC:kFu7Txba/f3tKC
MD5:	2969399476C68820D10F2F39C1A185AC
SHA1:	DC200D6E297564696D7CEE7DE4EF424E1E984618
SHA-256:	37B8E715CFB46F0EF2CCCC7F648ECB7E6E30328FD59E3E0B5BBC095E356EE30B
SHA-512:	DF90360863BA0E72984CF6D4991F859EA8FD52CDFA72CBBF184A7050E83E7E626599AD44E36A455E4946861469C13EE7AAAA4C7BF0721F81ADCEFB8B64EC256C
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012405101652000/v0/amp-analytics-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2405101652000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}},{isArray:n}=Array;function r(t,i){for(let s=0;s<t.length;s++)if(i(t[s],s,t))return s;return-1}function o(t,i){const s=t.length-i.length;return s>=0&&t.indexOf(i,s)==s}function h(t,i,s){const e=s\|\|1;for(let s=0;s<e;s++){let s=0;if(t=t.replace(/\${([^{}]*)}/g,((t,e)=>(s++,i(e)))),!s)break}return t}var{hasOwnProperty:u,toString:c}=Object.prototype;function a(t){return"[object Object]"===c.call(t)}function l(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function f(t,i){return u.call(t,i)}function d(t,i,s=10){const e=[],n=[];for(n.push({t:t,s:i,d:0});n.length>0;){const{d:t,s:i,t:r}=n.shift();if(e.includes(i))throw new Error("Source object has a circular reference.");if(e.push(i),r!==i)if(t>s)Object.assign(r,i);else for(c

Chrome Cache Entry: 257

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy=
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 258

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4604)
Category:	downloaded
Size (bytes):	4733
Entropy (8bit):	4.967566863893281
Encrypted:	false
SSDEEP:	96:f/fXVJF2U12XZ9z9uD92AM7xKoM6hanEyCxZHutWjmFZYyoM/Kot2U1K6f:fzfo9z9upEo6QEyCxZHu1QyXNn
MD5:	B616AA6E6E5D21188FA9139A12FFE6FE
SHA1:	6ED46B1F06FC6A507CB6BFFFBCEEA4FB0A132040
SHA-256:	7B0FB27181AA8C2244AB51F28E8B544248585A334184445B1DA9B04F89A794AC
SHA-512:	7EDDA904362CE9F97C8919BFC90B94BC02CF34A336C99AF200F0B3970EEB50856DCE517D7C240D3972E765AB73061248B1DD4D0362CCB0DA4A5B549158784069
Malicious:	false
Reputation:	low
URL:	https://monu.delivery/assets/scripts/vendors/xdomain/1.0.8a/xdomain_cookie.min.js
Preview:	/* Version 1.0.8 xdomain-cookies (http://contently.github.io/xdomain-cookies/) from Contently (https://github.com/contently) */..!function(exports){"use strict";var xDomainCookie=function(iframe_path,namespace,xdomain_only,iframe_load_timeout_ms,secure_only,debug){function _log(){_debug&&(arguments[0]=":XDC_PAGE: "+arguments[0],console.log.apply(console,arguments))}function _inbound_postmessage(event){_log("_inbound_postmessage",event.origin,event.data);var origin=event.origin\|\|event.originalEvent.origin;if(iframe_path.substr(0,origin.length)===origin&&"string"==typeof event.data){var data=null;try{data=JSON.parse(event.data)}catch(e){}"object"!=typeof data\|\|data instanceof Array\|\|"msg_type"in data&&"xdsc_read"===data.msg_type&&"namespace"in data&&data.namespace===_namespace&&(_xdomain_cookie_data=data.cookies,_iframe_ready=!0,_fire_pending_callbacks())}}function _iframe_load_error_occured(){_log("_iframe_load_error_occured"),_iframe_load_error=!0,_fire_pending_callbacks()}function _on

Chrome Cache Entry: 259

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKog:8WiIUemo/HPbfCYKpY4DowuqMr1YSoe4
MD5:	C01529B769EEC119E28CA6136CA8AC10
SHA1:	D5F32A72C121F467674514B69BCA53D9EBC37535
SHA-256:	B56E939078ED1562539FE7047463A772987604CCC3A7EE27C04A770EC6347647
SHA-512:	A9E3371FF7B697A19884E705D4604511EC7EDE7A1FD5F5E647F68DA954799B857EF54574AD3AE1B640B5174273F842142634CCF0139331DDD141FA3E37A56472
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&pid=nuvrykVNik5mU&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Chrome Cache Entry: 260

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4985)
Category:	downloaded
Size (bytes):	5046
Entropy (8bit):	5.196970318298508
Encrypted:	false
SSDEEP:	96:W4GBGOcH2bzZv+NE+byz+P9vhnJYUi0Blumdr2mztyy3xPLlS8d1:WDoOcWbzZv+N1BhnJY+Td2mzt5dX/
MD5:	ED38C297C732EB84A7B18C3DBF5E0D15
SHA1:	D210F83635171330681E38B111BA843F6DB3AB48
SHA-256:	A32203A0332577F8984FFC13E1B20A8A6FAF38E3D48AB5B6308523A67975D7BF
SHA-512:	C810E00804ED032788A9BCD7FA36CA74082B2468FEE375B4A0C5C8E969DD0705198C59AC2DAFD9B0AFB20830A85E42BFCAF051196278ADB36C616005D40EB927
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/prebid-universal-creative@latest/dist/banner.js
Preview:	/* prebid-universal-creative v1.16.0.Updated : 2023-10-12 */.!function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=2)}([function(e,t,n){"use strict";t.b=function(t){var n={hb_adid:"adId",hb_cache_host:"cacheHost",hb_cache_path:"cachePath",hb_cache_id:"uuid",hb_format:"mediaType",hb_env:"env",hb_size:"size",hb_pb:"hbPb"};function e(e){return!(!t[e]\|\|!(function(e){return a(e,"Object")}(t[e])&&0<Object.keys(t[e]).length\|\|i(t[e])&&""!==t[e]))}var r={},o={};e("targetingMap")?o=function(t){var n={};return Object.keys(t).forEach(function(e){Array.isArray(t[e])&&0<t[e].length&&(n[e]=t[e][0])}),n}(t.

Chrome Cache Entry: 261

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.010435196472538
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoek:8DIGoXbfCYKpEeYlywuqIQWOek
MD5:	703621464D0EBDA40B3127E6CEEB8C29
SHA1:	093BEC9E006B1D0968DCC93687CA531BAE1CAB45
SHA-256:	4CF66860DE73C82EE7F69B4CC97B7EACC9540401CC1D314B8A8FBE2DEBFDF4DE
SHA-512:	B9658A18E6E3A21989E1C52BA580C3966991FEECF077F824E6A48C44AAA9F295D369871330981F23671ADF4448EBAF4779254FA4805A36D7E9928A6DC6D02822
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"9"})

Chrome Cache Entry: 263

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35164)
Category:	downloaded
Size (bytes):	62461
Entropy (8bit):	5.319881630962789
Encrypted:	false
SSDEEP:	768:E95oQso+rDUoSz8uFWMyc81PqIEMNKtYV9+aIVixZ6QjrbJBqCljU5TxKBQfRwzY:yH+vVSz8uqthGlEbDasWko
MD5:	795D3AE00DAC4B2F24A3F314E393AFFE
SHA1:	1A5F4455A5E852D912748BC6DFDE21C1FAADB0C9
SHA-256:	95B2FF05C6418FFA9BB3DFEC66E5D7306D5BFF7156914CA329A7B0864F469540
SHA-512:	1C7411B4C1A46DB4FA57AE1C7797F2923E7B8B9ACB9C2C7DC64192E5ECBD7ABA7D203E9E519528F6744B85C8D7A40A97B2E38386F0FDABE60062A3138543DBFC
Malicious:	false
Reputation:	low
URL:	https://monu.delivery/site/0/e/f234e7-fc25-4181-9fdc-65d9171ace67.js
Preview:	var $MMT = $MMT \|\| {}; $MMT.cmd = $MMT.cmd \|\| []; $MMT.configuration = {"user_geos": {"geo":{"ip":"8.46.123.175", "city": "New York", "region": "NY", "country": "US", "lat": 40.71230, "lon": -74.00680, "type": 2, "accuracy": 20, "ipservice": 3, "metro": "501", "zip": "10118", "tz": "America/New_York", "utcoffset": 240}, "country": {"geoname_registered": {"is_in_european_union": 0}, "registered_country": {"is_in_european_union": 0}, "represented_country": {"is_in_european_union": 0}, "is_big_4": 1, "is_na": 1, "is_us": 1, "tier":1}}, "gdpr_config": {"gdpr_cmp": "True", "privacy_policy_url": "", "popup_text_color": "", "popup_bg": "", "btn_text_color": "", "btn_bg": "", "position": "Bottom Right", "ads_check": false}, "exclusionUrls": [], "loadAsync": false, "loadDefer": false, "loadInBody": false, "enableErrorLogging": false, "deliveryServer": "//monu.delivery", "adUnit": "TBN.custommapposter", "uuid": "0ef234e7-fc25-4181-9fdc-65d9171ace67", "pin": "KJI01M", "write": {"scripts": {"pre":

Chrome Cache Entry: 265

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 266

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58878)
Category:	downloaded
Size (bytes):	58975
Entropy (8bit):	5.278522968639938
Encrypted:	false
SSDEEP:	768:0xNC8LXM6Hz8mDGs8vToQnnS33cR828/t42nbbCIGz2/IQGTKvBrZwW9:YLX0mXQnnS33cR828/tjM2AQvFZj
MD5:	7586740695219E27C1483AC351F18884
SHA1:	2078C128D66168E617B9AB555C41A353DA85C8E6
SHA-256:	05E77DAB19940DD457E00282837FAECC886434CC8CC5F631575A5E6C386DE774
SHA-512:	E6D4BC8D37EF78C46C1052AF92AD3265852D9ADA9CC87F768F4ED005815FEEAF206EDC79981350AD281889FB4D6BA7B3FD9E2C733B3F90023EE361C876070E9A
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/id5.js
Preview:	/*. @id5io/id5-api.js. * @version v1.0.29. * @link https://id5.io/. * @license Apache-2.0. */.!function(n){var i={};function r(e){if(i[e])return i[e].exports;var t=i[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,r),t.l=!0,t.exports}r.m=n,r.c=i,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=8)}([function(e,t,n){"use strict";function s(){return(s=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n,i=arguments[t];for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n])}return e}).apply(this,arguments)}function u(e){return(u="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"s

Chrome Cache Entry: 268

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	165
Entropy (8bit):	5.069624282421957
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCflYM:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr1V
MD5:	36753402294D66531581C70042DA1817
SHA1:	F662EC6E71ACCD189FA63650C139E2156BF62790
SHA-256:	3293FD29ADDE5EC45017B379425BD48E507E837081CBBE581637652EAC77D0F7
SHA-512:	94B6E96A67B7AC1397F5D8544DCD4AD583BCF737A59E0C119718730E600EF7790C614ED5DDF6616EA4E39210F22CDE77F5D1E98B31C64916CF32D1C436C8199C
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=8&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"8"})

Chrome Cache Entry: 269

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 270

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=p.d.l&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Fsearch-article%22%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 271

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.0042193681071545
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKo0:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeM
MD5:	4A64CB4B7DE830E5A463316A629D3BAF
SHA1:	2AA5884F7BFA64F386884ED7B258DC41D274E888
SHA-256:	D09BF971A29FE8ED23D5F6FA985E71D636F13A63062290B15297168244936D1B
SHA-512:	12FD7DA3A1FF5CB8BD56F1F0B39005BA1F24D876D185829DC28A96F8C243AB1240362AF255192104E9DBAE33AF883825CCFE56191F2D2209A8C49F1653FF5A1A
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&pid=nuvrykVNik5mU&cb=1&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 272

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	139971
Entropy (8bit):	4.9198314781133154
Encrypted:	false
SSDEEP:	1536:mYtjakc0aZDT/Zs4sC0jfjR1YG+s2Ltt99ac0eW53zzVCoYs2rhrXzgEA6SJB5LQ:j5E2tvYkUv1
MD5:	512410D9227BB0C2481E175DCE0EDA72
SHA1:	1DEB5D9F09592101E632A8351865D54B1D6A27F7
SHA-256:	C337D42ED7979C6BE0282900BD957DD9D112A430DC7761463D655EB8F0D9BC07
SHA-512:	855FEB227BB9448DE654BF5C616A2DBF71C4F97550A00A30372CB0AE2F7B0BD70B7A4430D84C8386934B7064D8BC3F66E926B5B2DD9920812AF96C3469743A86
Malicious:	false
Reputation:	low
URL:	https://www.swisspass.ch//resources/img/logo_text_de-20200819.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg. xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cc="http://creativecommons.org/ns#". xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#". xmlns:svg="http://www.w3.org/2000/svg". xmlns="http://www.w3.org/2000/svg". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". viewBox="0 0 509.7 132.02". version="1.1". id="svg4223". sodipodi:docname="logo_text_de.svg". inkscape:version="0.92.4 (5da689c313, 2019-01-14)". inkscape:export-filename="C:\Users\u230023\Downloads\logo_text_en.png". inkscape:export-xdpi="96.24485". inkscape:export-ydpi="96.24485">. <metadata. id="metadata4227">. <rdf:RDF>. <cc:Work. rdf:about="">. <dc:format>image/svg+xml</dc:format>. <dc:type. rdf:resource="http://purl.org/dc/dcmitype/StillImage" />. <dc:title>Element 1</dc:title>. </cc:Work>

Chrome Cache Entry: 273

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 274

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
Preview:	Not Found

Chrome Cache Entry: 275

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeX:8DIGoXbfCYKpgrlywuqIQWOeX
MD5:	500562A68030EEC4C03BC133070D9C0B
SHA1:	9C8C2EA2056766161C0958931A3662B85056BE2A
SHA-256:	5A5B947C1FC029EAE511B440972A8D575E6D0E99E547B2BEE2219CA11CC78A19
SHA-512:	9A3DCF23DA09BBCA43D8D310FD2DEB65CC89581947701F6AC9D6923C74296A9E35AC3B4C7CA9A09F2AA5FBABB179618228A5E47737460612D68980F4D4BC0DAD
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=0&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 277

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 278

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65356)
Category:	downloaded
Size (bytes):	283710
Entropy (8bit):	5.303572456207391
Encrypted:	false
SSDEEP:	6144:prtezSbk4DuP90q1/HaN5ztYkm3YBDcNM:prtASbk4DuPx1PaN5t7Dcy
MD5:	EF00ABCFC9FBE7942892B244529CA32D
SHA1:	FBE2FD13E3979293AAD341FF4A8993B94059FD30
SHA-256:	ACCB4D8C2639CFC9495B88C6888595F4012BB9510C4297BAA7218208B13EE1F4
SHA-512:	53E71B4C3E547E4F70E28F611BBFE6ECEE7945B4B7681B9DB2C3D08A4E32CB52DFF598424ED2613B2355EFB53A3BA47645B5DF2F52E9FD83616820A4634EC238
Malicious:	false
Reputation:	low
URL:	https://client.aps.amazon-adsystem.com/publisher.js
Preview:	/! @amzn/apswebclientlibrary - web-client-bundle - v24.506.1519 - 2024-05-06 15:19:52 /.!function(){"use strict";const e="24.506.1519";class t{constructor(){this._batchSize=300,this._serviceUrl="https://prod.tahoe-analytics.publishers.advertising.a2z.com/logevent/putRecords?encoded=true",this._publicSourceIdentifier="79db72eb0b5c7255afa54a253df24fb4a5ac916bf40b51c730df8850aa5665ca",this._queueLimit=5e3,this._sampleRates=new Map([["error",0],["feat",0]]),this._recordQueues=new Map([["error",[]],["feat",[]]]),this.clearAndUpdateEventProcessingInterval(5e3)}logEvent({eventCategory:e,eventName:t,eventProperties:n}){const o=`${Date.now()}`,r={eventSource:"aps_web_client_library",eventTime:o,eventCategory:e,eventName:t,eventProperties:{...n}};try{const e={Data:window.btoa(JSON.stringify(r)),PartitionKey:o};this._recordQueues.get(r.eventCategory)?.push(e)}catch(e){}}setSampleRates(e){const t=e=>e<0?0:e>=0&&e<=1?e:1;"number"==typeof e?.error&&this._sampleRates.set("error",t(e.error)),"number

Chrome Cache Entry: 280

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 179210
Category:	downloaded
Size (bytes):	69161
Entropy (8bit):	7.992924058945957
Encrypted:	true
SSDEEP:	1536:exYpKgOjaGu90WbKxjvof9UwyWdovsYui0+6BB7B4MxHb:ZnOjaGGuWdolp6B5B4Mp
MD5:	AB22D736C8100DC6E3736C8ABF6C45D5
SHA1:	46BEE072F81BE86EF33FD320111B1D722DEEFF0C
SHA-256:	6E2B793BAFCD4835838519B8E3E8F28F6CB253240AB65399FD8D46346EAD5EF7
SHA-512:	27149334621A9114D3F4E41377AEFDD0C799A55E31C90FF5A38CAD2103C165EC2DE1D46898CE061B09430902BCCF2FC6A51032C80176A72BE2D37473583C7228
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/ch/104c5/js/vendor.min-20200819.js.download
Preview:	............{..5..?..9...DKI..,.Img...I.vO.^.'.H.$j.`A......([N.9...S..?.^{.u.....s%.`.?...cU...r3..<x6.N.....\.\|p.~W.W.......eQ.~....g^q}..0xyKEA..n....;?..(=..n...........`..S.GG.0y........Z..Y....@...<:...L.\|/..[..E......E.E.#..J.......k.F..M...-......o..s.M$..]HHa<d..(....a..z....hI..;i...)..8..Z.....(..N..sH..\|...y... )hU..m........nSs.E...Rr........\|.u....{RW..a.. D./."......D.$..`.Cs./{iyA..Sje.=.Sn.J$i....p.n..'.<..&f..x..S!....q..X+e.n.K....8..W;...Ms.D.w.c+#o......!.p7h.b..m...]"~N+..!P:...~..qL..'...~....1j..p.=....T........J..#...P.B..".+.'.(-....Tf.....9..,.3.+...6..K..%...S.hBkr..+...9g.2.[p.4.a.Z..B....\|...V...3..\|<..H.$J..5.....EQ.w.a.q9..6.$;..M..$..._4B..eES..xQ...CskZ.C...z....-.v...Um..-G.JURW.6(\|D.{...x.MB"<B......?...u@.H...[.x.C..2......\...e{...t..Bk.;.........K.(K..9.)..SE=sinj-...r..././/.u.mym.R.L....{..*...L.......C$.y.g.t..x.W..ru../......-.t....h7VK# ...+... Mro'J6`..x....Z...Q.$/...-....!+Ceb.p...ct.

Chrome Cache Entry: 282

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 283

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.561814811046517
Encrypted:	false
SSDEEP:	3:YM2zWXJvN3VuLAx6XJJRMLkJ5fMYn:YM2khkAyJJRMLA2Y
MD5:	7016DA56C324CA7D24D38F363FB98B3C
SHA1:	DF7BBC4D5D99C9EFECC2885523BC53176AD1354A
SHA-256:	BA8451F39B0887DFFF955335E5BF9007D350BF5C2D9F5EF697E07275ECBC331A
SHA-512:	89849DA0DE17EE15FE25B99B5D697C100149BDEF67436817AD1BA1BFB8B478D6079A929EBD8E899F75A425B97FC8DE5248800EFBABDC06562B0A9CD4B490CE84
Malicious:	false
Reputation:	low
Preview:	{"ingestUrl":"https://api.id5-sync.com/analytics/event","sampling":10}

Chrome Cache Entry: 284

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	3220
Entropy (8bit):	7.931330164247743
Encrypted:	false
SSDEEP:	96:hvdpn/ZXdyo0HJUsiUzeTiV7ySkgMnlB0UB3tC:hvdRBNIHJKC7ySJ1Y3tC
MD5:	19DE918A6DE85B2D9B15440B2DE8A6E2
SHA1:	B20B15B5C49AE7505DFD29DACC758F929CACBD65
SHA-256:	8FB9C267B5E4A904F81C501EE2273002432DC832690F1114B04715D70E30B00D
SHA-512:	6865D57BA0DAB79BC7F9C68FF68A78B0193CD813BE50A31A1B7C6DD17F575B779A35F26EE404BBD7E31DE3BDA071FDACF9801DDE3DCA2735174137AEFEA5E06F
Malicious:	false
Reputation:	low
URL:	https://d27la2n6wh4qws.cloudfront.net/1.11.276/assets/libs/modernizr.js
Preview:	Q...@D1..E.0..-....h..v...S.?!...@.v....M}..j.T%.M.[..;...O....(.yw.......@.t...I....eov@.21.A.p6=.:hn.g7.y./...q+y...r...x.........P<............l8y..vn..:....y...\<....x.2.>..7...x....p..p......bW............'.&......4..3r..A.u...8\.......pM.][0...8..TQN..i..TxX/..o.bd5.g..\|.$..6...`....{..:.?..<.+.b..r/....K.H.x..l...Q.B..\.3.........a...`.8.........i0.z...1.U...e..Lev.\S4=.D../....eA..&.e...SI.}.i..Z.H..Jt....c2v....O...#..s.<F........0.....H.......P$...#n..8\|..\...rLe...O..M...F..&S^.Uq-."..em..{aN..D..2........y..ij7...<..A...v.A>H9.....gjT.j7....n...B$ ..Q..u.....[.....<.AB.s...D6.r}5.h...TQ....:.X..T.... b.IRS.3...=..&9.c..6'..E...C.7.To^...0...LSf........z\|..V...........R.y....n;Y..?.7w..Fk... ...rC..v.}!.....DT......T...t [0..I%r..m.$..{9;......b.U.M.~..6.x...K\."-....p.Hc&.m+..;KS.$a.s.f.....Z.4.."..,...nD.\.X.}.RHE.mh.1g.F.t..,.&*8.S)...f...Y..4...j^5...kq..M....S..0......U[.e...3b.o..X..o....NQ. ...+.Ql.P.]

Chrome Cache Entry: 285

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.020782046102125
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoeC:8DIGoXbfCYKpEeYlywuqIQWOeC
MD5:	527A8763BF4BB0B91C475709AD8DC2E9
SHA1:	864F747EFA1E47CA3967D9A32366258DFB9BD23B
SHA-256:	69BB2B7329E60BED8D384DD895A56B20B2B3DC788742048435F261634C6C15E8
SHA-512:	090579B32236A07557A4075826605B655EC56AB1885624605AD27AF89FCF7103CB404CA2554FFF82CC5B0BCD3A94137FA3153BF123164D4DEDD2F67B3159BECB
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=16&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"16"})

Chrome Cache Entry: 286

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7660f095-8567-4e13-b266-ede79c1f7a19&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 287

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47856)
Category:	downloaded
Size (bytes):	47857
Entropy (8bit):	5.494277192262503
Encrypted:	false
SSDEEP:	768:vlojuobz0B8NZTWgrM/xDD9J4hsmHVRlLYOJOa75ljSfw74iDcctn/1e:NLEc5JVm/lL/lx7Ic9Y
MD5:	625133D137DFF0D5BEC1A85B375B3933
SHA1:	1843D5A52A13BC526FE69982900BE77183EFE49E
SHA-256:	D8B6AF01826DB042C58B8CEEE1DDA3AF69ED8A85CED5913A007782AE3B45D2F5
SHA-512:	20380D6FED45F5726D06CCFE699BDF81A638DB7BE3866D40F15EC0F97123EE0A9DBD981AF957BA2154CCC8097E63BC8F57FB894898B086CFD97C51C9666880DC
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202405090101/pubads_impl_page_level_ads.js
Preview:	window.googletag&&typeof googletag._gpt_js_load_2_=='function'&&googletag._gpt_js_load_2_(function(_,_m){var ZS=function(a){var b=_.ff();if("function"!==typeof a)throw b=b?b()+"\n":"",Error(b+String(a));return a},aT=function(a){if(!$S.test(a))return null;a=Number(a);return isNaN(a)?null:a},bT=function(a,b){return a&&a.source?a.source===b\|\|a.source.parent===b:!1},dT=function(a){var b={bottom:"auto",clear:"none",display:"inline","float":"none",height:"auto",left:"auto",margin:0,"margin-bottom":0,"margin-left":0,"margin-right":"0","margin-top":0,"max-height":"none","max-width":"none",opacity:1,overflow:"visible",padding:0,"padding-bottom":0,"padding-left":0,"padding-right":0,"padding-top":0,position:"static",right:"auto",top:"auto","vertical-align":"baseline",visibility:"visible",width:"auto","z-index":"auto"};_.Ox(_.y(Object,"keys").call(Object,b),function(c){var d=a.style[_.gy(c)];("undefined"!==typeof d?d:a.style[_.MB(a,c)])\|\|_.NB(a,c,b[c])});cT(a)},gT=function(a){var b=_.Ij(new _.Jj,a

Chrome Cache Entry: 288

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	18619
Entropy (8bit):	7.988062964051925
Encrypted:	false
SSDEEP:	384:Ia4oktowVnvf6a8lQH7N6F+7cr4q/81tEO3W7QlpNUE3nke2OGjfRdpXs2rU1:lsFvg6HwE7QlEjAQlDUE0e2ljfrd7o1
MD5:	69258D1866429D4D8B3F5EEECC59594B
SHA1:	40E7E2499EE93B134D4E251CB051C6FF7BDCC40E
SHA-256:	2D37D5D4B456E79A86A0951071E69D8AD372B3E68B7639DE3207AE633F45C2FE
SHA-512:	DA57AD997431FC36AD0A28CA1CAA9F00AF1C4410497855963727BA0AA93228B50BAD160FB636658FB70B3D78878FB2EDE588F82551FC766D4A3B82254B958144
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=2141062759817676&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=20&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339554&lmt=1715994881&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=7&ucis=g&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=728x-1&msz=728x-1&fws=512&ohw=0&psts=AOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGsk-pBmh_Qt277uyS0gZoO11yiwyTygJVF5ALbx571oGcG2uTG--hUifZNxPGXnS-hRLDSvJk1Z7GcKz9zjRQKdm%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGsmSMWoXZ3x7Uoc3XWZfCEr40I6RikR-HNYIklUTWB64F7YaMCsedStqhRCsMv8zjfqNJ1K_mpNkH_fFJYmPBwra&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D2%26monu%3D728x90_B2%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_bottom%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_500%26auction_id%3Dfca8c04d-0628-40ec-8516-0914914f8a9f%26monu_df%3D0.16%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.16%26hb_size%3D728x90%26hb_adid%3D512dcdd31cbf9696%26hb_bidder%3Dkueezrtb%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D1%26lre_rc%3Dfalse_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.16%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=313124495&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.>.....z.R.z.......................I...#.j......:7N...L.aQd@n..o..o..e....5.c,.....JR..\&.e....f..m....t.K.(.dI.T..H..-....8.p.7..t......u9H.L>s.H..~o..7.......P5...H..4.{.........p...._.Fnw..5%~cL(gB.RE6..Y..?.d\. R. .md..p.oh5..&C.s.....8.....\.ZR.H8K~....}...-.. \h.1f.....#.4...N.~jh...].\|l.x...&.......n..NN..#....f.....E.o....L.\|M..tw:...{.;.......b...&<.....lo..x....w.LgIk._w$(.o.....y..[.2g;...Os....w/..Nn...Q...};...s.7_../.....R...{.......E].-N_....N......N......AU.:9.V..^.><m/.!..(.....=....I2...X.[.0..%..7X.W'..<...,.yu...T.T.MZ...Q.b.....X].~&...$Q_.. ...;3.&..*.0M....+....$.F.%.....E>.d........Lvvg...4..J.M0.X;7KQ....K.W.k9..St".N&.....I1{g..i.DM=zg2M....l.....,7...t..y..N\|{.}j.7R.'....?...nZc.]...b..\..ui...}..\6.Y....^.=......8.......<.M.Z.kTK3.x..il)......G...~..H.m1..{.$........?g7...$..u1.....z_.UOSh.eyJ..X.:qu?.b[..R .3.p.....82.d..R....v0...:."].....~..J\....www..a..Y.P.SX.a.......D.....N...I........,1z..=t_.zm].J.)?

Chrome Cache Entry: 289

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2576)
Category:	downloaded
Size (bytes):	82359
Entropy (8bit):	5.542384346198929
Encrypted:	false
SSDEEP:	1536:EJIrJmBImu6Pd2osbkL+8kK3CD0Qt6jrOcOejqk+tQ:GIQVd73EOrJOwd
MD5:	1CAD5A6EDBBF8DA3391EC0F9966CCCA0
SHA1:	572D86990C0A590CF67B938C9A67966534BEAB49
SHA-256:	0925DEAB3DC0CA10E7DF8E8664EEEFAABF037F246E17F3A4CC57DBD2918EAA18
SHA-512:	5D8E5D371A4B65A0B1621E9C19A20D0A580DBDD8186F1F5BD9E630AF4A7A31DE13959E36B93AAA976597D85647C20194E03C114DB01EB422D411C964340DAD84
Malicious:	false
Reputation:	low
URL:	https://cdn.adnxs.com/v/s/244/trk.js
Preview:	if(typeof _lntv=='undefined'){_lntv={}}_lntv.s=function(){function __re(H){var e="";for(var p=0;p<H.length;p++){var I=H.charCodeAt(p);if(I>=97&&I<=109\|\|I>=65&&I<=77){I+=13}else{if(I>=110&&I<=122\|\|I>=78&&I<=90){I-=13}}e+=String.fromCharCode(I)}return e}var Hb='undefined',Ib='',Jb='iPhone',Kb=0,Lb='//cdn.adnxs.com/v/s/244/',Mb='//cdn.adnxs-simple.com/v/s/244/',Nb='v',Ob='script',Pb=1,Qb='s',Rb='lnt.user.agent',Sb='safari9',Tb='iOS',Ub=1000,Vb=2,Wb='unknown',Xb='edge',Yb='edge15',Zb='msie',$b='trident',_b='function',ac='native',bc='ie11',cc='webkit',dc='chrome',ec='chrome52',fc='safari',gc='gecko',hc='gecko40',ic='android',jc='linux',kc='ipod',lc='iphone',mc='ipad',nc='macintosh',oc='mac',pc='windows',qc='win',rc='CrOS',sc='chromeos',tc=3,uc=4,vc='355EB940B5BCDFF13359AFC2F0DEF56B',wc=':1',xc=':2',yc=':3',zc=':4',Ac=':',Bc='DOMContentLoaded',Cc=50;var g=Hb,h=Ib,i=Jb,j=Kb,k=Lb,l=Mb,m=Nb,n=Ob,o=Pb,p=Qb,q=Rb,r=Sb,t=Tb,u=Ub,v=Vb,w=Wb,A=Xb,B=Yb,C=Zb,D=$b,F=_b,G=ac,H=bc,I=cc,J=dc,K=ec,L=fc,M=gc,

Chrome Cache Entry: 292

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2042)
Category:	downloaded
Size (bytes):	39996
Entropy (8bit):	5.340209105496586
Encrypted:	false
SSDEEP:	768:jveeTKgTJiZQ0d9RjQOl7F3GMCGfBeS3DYvWetH/iUwUGb/PJv1z1t42z3RxRu9L:jveaKgUQFE3G6envWetH/iUwUGb/PJv8
MD5:	8390CAAF393CA662C6DA064D8EA3C9B9
SHA1:	38858D3D75BED48CF8A84840D03BA9EA661E5D7B
SHA-256:	01172E9AC9330920E66E282D2D77ED1AE863BBAB08AEC27B168E8D3C82D50C18
SHA-512:	18805A0738AA3B665DDC7C2F4A41BA3BD377287DAC1A852AA539854B1A3457234C4F838B5C3E4C864F9EC9E2E6D385D976667FFF71F54EA6490B3463BE1635F3
Malicious:	false
Reputation:	low
URL:	https://live.primis.tech/content/omid/static/omweb-v1.min.js
Preview:	;(function(omidGlobal) {. var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function q(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},r='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 293

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKoZ:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeR
MD5:	6FD9C634402A2F873ABF30EEDA6AE49C
SHA1:	13650DF88E9B10EA5A0A68DEDEB7338097F18EB7
SHA-256:	94587207DDB580C65ED8402E3C9E87DB831D365C92A382534EC7FBFB7E98DEED
SHA-512:	CB37BB7B8E966C2658DE01915FBCD77A6548A002FE0A5AC80D7FF9E89D7A6E4D02F7CC67E39B08182A59973817CC987B983A4055B678A66036EAEDDFF83F2A83
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&pid=nuvrykVNik5mU&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 294

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1610)
Category:	dropped
Size (bytes):	83554
Entropy (8bit):	5.2760623173649375
Encrypted:	false
SSDEEP:	1536:kePI25n/FeSqXaNK7IzyBAV7N5M7wUn7+N/QhJKMsRTVFUdo11VuPyaR/i7q2I4J:ZPR
MD5:	4216681495618723E2D3A00B94293BD6
SHA1:	1F8C3FDE9AA3C476F6AD7CB589ADC13831284A49
SHA-256:	9BFEE5539181275C2906C9471929857CB44AD3869FEC36C42DC469A2236D12FE
SHA-512:	659CD872B39F607C4DDE62912A9CEF8BBB85E705138638BB84992ED456E4FA2A5DF0ADA199B0BDF6856A98D8B48102B125A150F884E82DD21D5692D2EDCDD44C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<meta name="csrf-token" content="1B46QL7QrRJc7uC7UolFVOEqKOLnvj17kKEsMUep">. <meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1">.<meta name="msvalidate.01" content="77BC9EC2757BFFD6B08AB6E9830867E2" />.<meta name="msvalidate.01" content="8F0A17F8B7EE136DC522E193ADA44AC2" />.<meta name="msvalidate.01" content="81E0B92D870F20A5A81469EF8E834B59" />.<meta name="msvalidate.01" content="B3D56BE8396E01BC4B5FF1FADDBFEBAC" />.<meta name="msvalidate.01" content="6CF243145B598540D3EBE639EC0CED69" />.<meta name="msvalidate.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" />.<meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" />.<meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" />.<meta name="msvalidate.01" content="58D49F2458FE6C8E642907D29D522720" />.<meta name="msvalidate.01" co

Chrome Cache Entry: 296

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://context.monu.delivery/hems/pubcid/?domain=custommapposter.com&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762
Preview:	[]

Chrome Cache Entry: 297

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=c992f38f-79ee-483b-a206-98cc8db521aa&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 298

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.020782046102125
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoeA:8DIGoXbfCYKpEeYlywuqIQWOeA
MD5:	83A81F5C4C6A8801C7AE6D8C89E8DD86
SHA1:	AB9F20DF01530E592B1E694E3F55EB2BFF05D494
SHA-256:	9DA9328BEC2DDB172A15FEA21DEFFED42C52A65260B5DBF1766FB3101C224B00
SHA-512:	3FDA528FFFBEEFBF48035290FB510F15C78B5F14D0B00CBC09812EE9E95FFD621C8A398AB3C8E3AD08E85793DF0A304DECE5D99F6B409204BE05ECE5914DF065
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=14&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"14"})

Chrome Cache Entry: 299

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 412
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	7.2627976020546825
Encrypted:	false
SSDEEP:	6:XtdSewqLhqDfavzBJt50lrbWOI+iCDaw76DtU3Kls0+tt/:XPSeNqDfav15MbWO1aVO3KlKf/
MD5:	C0955ED905FCE9376F62917D5E4095BF
SHA1:	0421F2868A80030612A44AD99BE8084276FA90CD
SHA-256:	314CDF39BD6E24244B8913BF98E6A3F03F4B155AC5A7E73EC074FDA26785F248
SHA-512:	78C47A8569EE4EDD19F5351AD56609F15A0511F1C276361F216F39F1DF215B1C92C787FACDD7D90E70D08A83EF34FAA18F8EBC90643CFCA8C096A832307FBF68
Malicious:	false
Reputation:	low
URL:	https://u.kueezrtb.com/fpd?_=1716283339657&yv=462ad8a&h=custommapposter.com
Preview:	..........<..n.0......-S.r0j.......D....D.'.>}mT.....>.....5.u.C..D.;...2..M/U..SZ\|aB N.......Z..G.b.......^....G....H.>..E...X.......h.R.p@...5..9.F.#.k.1.t.^..+..4Y.&.%.u.:u.......#..K.....l-s....s..8...'~.>s[.....P......(...^...v....}..#.W...J.2*.B..?..n ..fz....m..-..K......-,b............,......

Chrome Cache Entry: 300

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 736x729, segment length 16, comment: "Lavc60.41.100", baseline, precision 8, 162x92, components 3
Category:	dropped
Size (bytes):	5636
Entropy (8bit):	7.483458746760552
Encrypted:	false
SSDEEP:	96:HN26MT0D5MdtbZPAVwzVvj9NLaIiku1DpjP7A/L0Ffk5wgPEE:yYNMtKw15N2Mu1DpjP7qL9EE
MD5:	EF562E7F34FF8F50192C0787BED21189
SHA1:	1AC638E3785F92649E83EC322B4FCD7A33B94132
SHA-256:	DCFF47D208B7EB3056EC8BE44BDD9D394E83753082CD9898DF09975CCB64FD9A
SHA-512:	DAEED46A612CC500476B14A7AA0CFA07F219B077EC505944D4462B0F86C9A0D4A8A4ED97A6772B14EA99FFE60D3268888B8EC9F53F2995A63B982C7633FC980A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 301

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 302

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	6.587323709938353
Encrypted:	false
SSDEEP:	3:r9p1+CLUzbPbIRn0VM8OuHjNXXBVX0hqQYFDOqRMlLRVb3j104f:31+bJjNnLYlYFDzRMlFVjVf
MD5:	55BF9F143EB40C88431A663456F564E1
SHA1:	BA574507531FD985F397A35A332978E6CFF891F2
SHA-256:	597D6AB201D4E594BC1F6E86BC64731825FC2132CEDA43EB524C1B10CC40BFD8
SHA-512:	45A147D583F4DC3713570029F15DE3D6C00846F9163EC5D4322624ABF63A9C3DDB8876C4BAE657010950E8FE1F0F953CEAB2FD9C0ECDD29CFB8B5A9CEAFA00CD
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=522793913156512&correlator=4431559528825226&eid=31079956%2C31083632%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=160x600&ifi=7&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339756&lmt=1716105411&adxs=1095&adys=446&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&vis=2&psz=160x-1&msz=160x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283340&ga_hid=421100937&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283332631&idt=6344&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D160x600_B6%26slotNum%3D1%26placementNum%3D2%26allowNative%3Dfalse%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3Dundefined%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=222636669&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	....D.....>h7~..np..x...>M..>.....8........$.6....L.8.F.bi.@../....$.p..W....R?...K;y...s.?.L....t.4.@4s..gs>..D#.\>...q................

Chrome Cache Entry: 303

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2668
Entropy (8bit):	4.459978268283667
Encrypted:	false
SSDEEP:	48:uDj5rB7seMTkmUrqNw9deOej36lpHXWMyz1j:kgeZ/q8lF5s
MD5:	CA20FAFDD9EB008FEA69930377978B23
SHA1:	2E12E81415F8A41D3511107728CB1408F2C02F33
SHA-256:	BCF7CF073E4DC6E46A9CD1F03C6815816377F97A806F55D14651FF1EFA0425E1
SHA-512:	07EF3524E5DBC229D8E13BBEF11DE2DFE69B76B2BF02D983EAA41B8E0A0C96BA876C9100434E6D419B45E00E475C365F7A73EE634D44FC5CCD91C38EED9A2682
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/container-4.0.html
Preview:	<html>.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=0" />.</head>.<body>.<div id="IL_IFR_Content"></div>.<script>.. (function () {.. window.addEventListener("message", displayMessage, false);.. function displayMessage(e) {.. try {.. const evt = JSON.parse(e.data);.. if (evt.name === "IL_iceContent") {.. createContentIFrame(evt.content);.. const styleElement = document.createElement("style");.. styleElement.textContent = "body { margin: 0px !important; }";.. document.head.appendChild(styleElement);.. }.. if (evt.name === "IL_sendExternalMrc") {.. evt.mrcTrackingPixels.map((pixel) => {.. document.. .getElementById("IL_IFR_Content").. .insertAdjacentHTML(.. "beforeend",.. "<img src='" +.. pixel +..

Chrome Cache Entry: 304

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	411
Entropy (8bit):	3.7407341101390346
Encrypted:	false
SSDEEP:	3:YMVFt+gxJHJjLTDobNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5MJKgwjZE0FpLTaaai:YAHjzozz/iJEE0Fz3
MD5:	C51FCBA65C7D77051CD89A1E12DED276
SHA1:	FD319167BDAB927EA8915327250A9164F60FB0AE
SHA-256:	994CA787FFFFACCE174A010B6616B6E1134DC5EEB3F5224916155FC640AEC9B6
SHA-512:	538B49D1EF97A60B7DA1074C37214BDB715DDA476C2D79891A83943923FB5A6842629AAAC511EFADA20CC204C480BFC95EDE757965357EB1E3DF3AF401CFDE22
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2273347548520925&correlator=3220266305235650&eid=31083354%2C31083555%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=7&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283328709&lmt=1716004133&adxs=803&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2F&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283329&ga_hid=310703479&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283320832&idt=5735&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D300x250_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_500%26auction_id%3Deda2b4db-d900-478b-a6a1-d9583667eaaf%26monu_df%3D0.05%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.05%26hb_size%3D300x250%26hb_adid%3D2068267cdfb948d%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.05%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D1%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=434882259&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	{"/20842576/KJI01M/KJI01M-DDI.F":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CMOLpNK1noYDFXCUgwcdRmkMcw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"7",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 305

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.010435196472538
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoeCM:8DIGoXbfCYKpEeYlywuqIQWOeCM
MD5:	80C1C445A1A0ECBD8D5481E8C0263463
SHA1:	C8D1F5A8C7103909404E23CB920468FBF8384D62
SHA-256:	A72B8E07832222364AFC552C1F6432D7BC60D054B263875DEB471DDD32A24213
SHA-512:	7ADF488180C9FAAFDD1C91C935A936BC37F6CFB8D92A88A07C608C080A29AFD3B02669E6219D2A1DC075D5CD1C61727637B15DF25E90281F853DDDF39A966940
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"8"})

Chrome Cache Entry: 306

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.007076138131163
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoe/n:8DIGoXbfCYKpEeYlywuqIQWOe/n
MD5:	93C39BD91F700CB6BA0F45F7220D8870
SHA1:	79D288A643436B1D79CD151D6E3012F2F23F3D12
SHA-256:	72A52D633780164D3E4602F11FAB0423522771EC4077776F730C57883425B4FC
SHA-512:	BB8D4AC7E0776727CE8BFDA395A19DBD475B54068FF3C3B87A4500EE5C3487F9BFF7F3FC69AE2B6BA2C6FD6F6E9EDFC8A2CD05FCE5F4F3BCA265F192D8B1348E
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=11&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"11"})

Chrome Cache Entry: 307

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/cookie?partnerId=sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=054b4136-01f6-45be-b12f-751883821122
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 308

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.613439903612076
Encrypted:	false
SSDEEP:	3:McNM9F0ffrVyzHz9zzssS/6bB8tfrC+cGdk9rDIQJ0jHJJ2oDn:L8OffszxzAsWwKJr3iPzCd
MD5:	560A5EBDD5E39D23724A5F2437AC2216
SHA1:	F6AC77CCE8EEF066D3A8F9190C419181BAAFDE7A
SHA-256:	96BEDDFE50E8459C54C9BB9E5A3384E38CA7E0D00D531DA060B0D29D38A7EED6
SHA-512:	104695918846861E524E8B8C28E2DD6481A8DAEB1933B2B26895C1BF158792058EB4745B6347AAB8FADC04343CC0458FBDED5BA9AC3A800DE57F9C820EA92CDC
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=3954767567819985&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=19&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283337543&lmt=1715994881&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=6&ucis=g&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=728x-1&msz=728x-1&fws=512&ohw=0&psts=AOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGsk-pBmh_Qt277uyS0gZoO11yiwyTygJVF5ALbx571oGcG2uTG--hUifZNxPGXnS-hRLDSvJk1Z7GcKz9zjRQKdm%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGsmSMWoXZ3x7Uoc3XWZfCEr40I6RikR-HNYIklUTWB64F7YaMCsedStqhRCsMv8zjfqNJ1K_mpNkH_fFJYmPBwra&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D2%26monu%3D728x90_B2%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_bottom%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_1900%26auction_id%3D52d80e7b-466e-4414-a1e2-575288cb7537%26monu_df%3D0.07%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.07%26hb_size%3D728x90%26hb_adid%3D48951243befb4486%26hb_bidder%3Dkueezrtb%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D1%26lre_rc%3Dfalse_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.07%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=313124495&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....y..xyr3^...8D.X.Qj..0....c:...j\|..."3Q..\...m.6.w...d...!Kj,...Y.`.~....]w.......c....I.;..+.o.t...m.-...9....Gz...,.2.H.....

Chrome Cache Entry: 309

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.55954563450997
Encrypted:	false
SSDEEP:	3:YJH/QYyZ8uY:YJ/QzY
MD5:	F2180A73E935AC19D3153C0C20F10605
SHA1:	46F5167B2A58766C0B81271463B0CD5273AC85F0
SHA-256:	5313CABC5CF9660CA49A63FAE32C32EB8329302151A871DBBDC90C2877018EFB
SHA-512:	649D76EAFD9B45C700D36367D8B105E461FC5ACB31D05BAEE41FE1B3E14F1977439175E04F002735459D3CE5AF17A2767CF6CB730C94A5DD9703A11829F05C6E
Malicious:	false
Reputation:	low
Preview:	{"lb":"eqUgwhVoJWDYmYOJsnK5Fw=="}

Chrome Cache Entry: 310

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.020782046102125
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoeW:8DIGoXbfCYKpEeYlywuqIQWOeW
MD5:	E54960A277E18E06C51A41A2013ED060
SHA1:	D0C702A409037E352FFF6FBB63FF6F486F2A2A8E
SHA-256:	5476F18A9B4A480E63E1661DFA6AEF73153F124253D093BA1503CE6098FFC953
SHA-512:	7CDC6C8A1358F95CC7C26A1789B2BC05C52CAF132F32B5A3D0938937541CBB303A1DFDC7EE8FFC51AD469721349762E5A5511D8538D9463590488D0E56C789FD
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=12&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"12"})

Chrome Cache Entry: 311

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.010831797345906
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoeU:8DIGoXbfCYKpEeYlywuqIQWOeU
MD5:	4D497F07CB9AB8B694F75C1C3FB64D3D
SHA1:	6ACA6C7AFA2E5B3CD35302147B3C518ECB550B52
SHA-256:	1FAE2C6A1184A651D3DBBF1C9898C740734C47A52B035779AB29C17368F10542
SHA-512:	497AF2BDFE7F8E1C7708BFA939EE8A4808C01F0524426ED27A56332861930DDC830E8D45551CCF71F54CA7D836126A8E6E15D3EF94E183A840D9A438FBE14CE4
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=10&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"10"})

Chrome Cache Entry: 312

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=p.f.i&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2F%22%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 313

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://1261c6478a9a9c0ed2fa7ce6d52becf9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 314

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920)
Category:	downloaded
Size (bytes):	152645
Entropy (8bit):	5.614660666553344
Encrypted:	false
SSDEEP:	3072:jlK3p0Mk3ZyIS+JD1h0f3zeQcj1Qhcm1T4hIqPapc2A7lFmWh/GCXLPcR/HXT3:jw3pk3ZyIS+JD1h0fkjKhcuT4yqPD2AA
MD5:	BF7D1AABF296E609C0D1B4721B681069
SHA1:	92667EA278A85490E93BA2B7F069CDA7C215FC79
SHA-256:	FC94D4E1B71B9B9626580EF1E5E8BC2DE4A5181792D63724EA328D2C3ABC1848
SHA-512:	A676AF993100CEE6EDB89AC400993C39923DCEC5FE5C3B80DBDECEBE2519B7C5AFF9D8CD412827F2206325C1A8282D586F9532F2FBC8EF904C9A363CE673FF86
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 315

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51763)
Category:	downloaded
Size (bytes):	51764
Entropy (8bit):	5.178178369800504
Encrypted:	false
SSDEEP:	384:PJkChn3vhYR7FZTeIyB3GdGzRNGY3pxDxMKelP/i/hAv+dyCtIe:C4f6PyB3V+vmT
MD5:	D37321569CBA76B1FCD8493690256610
SHA1:	0BC0DD5FAAABE4AA8721E6D67D985C93DB8A5D21
SHA-256:	A12D84EA3040A994B268B8E59BBF9451AF1CFE92D6F7EE6F7F5DA97A41F4B2E2
SHA-512:	741844B713B01F9A3FADEF9A3C9DA34D78EBE8E7D0A1852E35C5FC8FAC4758E83B55BA491F8F97B77A31832D717706106532FFAC8BACB65F78BB62EAB2087792
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/static-res/css/newsike.css?id=98d7a23ace76a572352b
Preview:	/! tailwindcss v2.2.7 \| MIT License \| https://tailwindcss.com//! modern-normalize v1.1.0 \| MIT License \| https://github.com/sindresorhus/modern-normalize /html{-webkit-text-size-adjust:100%;line-height:1.15;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{font-family:system-ui,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji;margin:0}hr{color:inherit;height:0}abbr[title]{-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Consolas,Liberation Mono,Menlo,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearanc

Chrome Cache Entry: 316

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 317

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	452757
Entropy (8bit):	5.357829356102245
Encrypted:	false
SSDEEP:	6144:4WpRmnYxRgUE7qLCp1RyoSQW2Hm5uO74sjGGHYyGedkQEs:4W+YxRgUE7qsWj74tyG2h
MD5:	3AB7906A4D12B7D35C62BAC882D39D74
SHA1:	5D034541D6A9A05B0719C3605880FCFC9229E4B4
SHA-256:	15DE250A16CE58A10F84BEBAB59B9005CE36DF4EC8E87C3BB1ACC92726CFA971
SHA-512:	3A8346339679F82647E763E70E91113366828BA07023578BDB8EF29A0EFAD62707330B7973BB7245C58B8D4FF4029F2D879F8CD3171E4F3612841E0BC8C7CD85
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202403.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 321

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/cookie?partnerId=pubmatics2s&userId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 322

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17951), with no line terminators
Category:	downloaded
Size (bytes):	17951
Entropy (8bit):	5.264039854862704
Encrypted:	false
SSDEEP:	384:ClzNKxojI9tv7jGV28zq7xMraomjN9y0eGjI7GrSHWqONuj3r/yhKIuFYtiFO05X:ezCojI9JGcEqWGocN9y0tI74SHcNujzV
MD5:	13964032FB9F994049E3066FDEAF9EBB
SHA1:	56550BA697D5139067423318F24A5F1E4AB1C6CC
SHA-256:	B1FDAB029F5F82FAA2DE83CD2EA43D74F2674DE90651CFFE1FB9F84230C00D51
SHA-512:	7D8F1D6CAF68EC20A2AE69EEC00EF449F3889F31335EE4E91E15421DBAA586A760CC89C512171D4235593FBF9D0CC95F87751E06532D6619F65B17CBF8CE6C1F
Malicious:	false
Reputation:	low
URL:	https://cdn-ima.33across.com/ppid.js
Preview:	var _33AcrossPpidMappingsProvider;(()=>{var t={753:(t,e,n)=>{const{loadConsentData:i,LocalStorageId:s,createFirstPartyIdStorageManager:o}=n(59),a=n(67),r=i();function c(t){let{expires:e,refreshInSeconds:n,...i}=t,{fetch:l=!1}=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};const h=new s({idKeyName:"33acrossEids",expires:e,refreshInSeconds:n}),u=new a(i,{consentDataHandler:r,localStorageEid:h,firstPartyIdStorageManager:o(i.win)});return c.providers.push(u),l&&u.fetch(),u}r.hasChangedSinceStored(),c.providers=[],t.exports=c},67:(t,e,n)=>{function i(t,e,n){s(t,e),e.set(t,n)}function s(t,e){if(e.has(t))throw new TypeError("Cannot initialize the same private elements twice on an object")}function o(t,e){return t.get(r(t,e))}function a(t,e,n){return t.set(r(t,e),n),n}function r(t,e,n){if("function"==typeof t?t===e:t.has(e))return arguments.length<3?e:n;throw new TypeError("Private element is not present on this object")}const{Ajax:c}=n(59),l="https://lexicon.33across.com/v1/ppid",h

Chrome Cache Entry: 323

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (37373), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	787852
Entropy (8bit):	5.603435963958486
Encrypted:	false
SSDEEP:	24576:tz5QviWyRaiWyRViWyRfGxM4H6PGH5ffOLuoS1HHye8Fjq9xBJ/DHNkTrb0X5Hjr:tz5QviWyRaiWyRViWyRfGxM4H6PGH5ff
MD5:	E65372D9B84E1146EABEFFF52B33C419
SHA1:	989D4A9D366FF56FF4858B1892A832DB7D02B36E
SHA-256:	D37978A37C0C820A240A398BF51057AE179778E78F6C5075BAC009CB8A9A9936
SHA-512:	483C184F1E98EFE486CACF05482D138938C3BE58F52ED1859C91204C062F869321C54A762C147760584D2DAC542357CAD46F64F1D7A6AD9EEC400E3C9461ECC6
Malicious:	false
Reputation:	low
URL:	https://live.primis.tech/live/liveVideo.php?vpaidManager=sekindo&s=58057&ri=6C69766553746174737C736B317B54307D7B64323032342D30352D32315F31327D7B7331353234323239307D7B4333307D7B535933567A64473974625746776347397A644756794C6D4E7662513D3D7D7B626368726F6D657D7B716465736B746F707D7B6F77696E646F77737D7B583639307D7B593430307D7B66317D7B4C393938317DFEFE&userIpAddr=8.46.123.175&userUA=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&debugInformation=&isWePassGdpr=1&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1&noViewableMidrollPolicy=vary&isDoublePreroll=1&autoSkipVideoSec=15&c2pWaitTime=0&sdkv=&isSinglePageFloatSupport=0&availCampaigns=&isAmpIframe=0&tagKeywords=&cbuster=1716283294&csuuid=664c679d515d1&debugInfo=15242290_&debugPlayerSession=&pubUrlDEMO=&isAsyncDEMO=0&customPlaylistIdDEMO=&sta=15242290&showLogo=0&clkUrl=&plMult=-1&schedule=eyJwcmVfcm9sbCI6MSwibWlkX3JvbGwiOltdLCJnYXAiOiJhdXRvIn0%3D&content=plembed22a2sngqtvwl&secondaryContent=&x=690&y=400&pubUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&contentNum=1&flow_closeBtn=1&flowCloseTimeout=0&flow_closeButtonPosition=right&flow_direction=tr&flow_horizontalOffset=1&flow_bottomOffset=13&impGap=1&flow_width=400&flow_height=225&videoType=flow&isOriginImg=0&gdpr=0&gdprConsent=&contentFeedId=&geoLati=40.7123&geoLong=-74.0068&vpTemplate=9981&flowMode=below&isRealPreroll=0&playerApiId=&isApp=0&ccpa=0&ccpaConsent=1---&subId=&appName=&appBundleId=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&appStoreUrl=&diaid=&appPrivacyPolicy=&appIsPaid=&appDeveloper=&appId=&appVersion=&sdkv=&enableResizeObserverInapp=0&isAppJs=0
Preview:	// <script type="text/javascript">.....try.....{......//get a reference to the google_ads_iframe parent div......var w = window;......var parentDiv = undefined;......var baseIframe = undefined;......var windowParentDocument = undefined;......if (w && w.frameElement)......{.......if (w.frameElement.id.indexOf('pbSekindo') != -1).......{........w = w.parent;.......}.......parentDiv = w.frameElement.parentNode;.......baseIframe = w.frameElement;......}......else......{.......// in case we are implemented directly in page (with no iframe, like app).......baseIframe = document.createElement('iframe');.......var div0 = document.createElement('div');.......parentDiv = document.createElement('div');.......parentDiv.id = 'primisPlayerContainerDiv';.........baseIframe.marginWidth = '0';.......baseIframe.marginHeight = '0';.......baseIframe.hspace = '0';.......baseIframe.vspace = '0';.......baseIframe.frameBorder = '0';.......baseIframe.scrolling = 'no';.......baseIframe.id = 'google_ads_iframe_d

Chrome Cache Entry: 324

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2471
Entropy (8bit):	7.892894695490014
Encrypted:	false
SSDEEP:	48:kSgMkt9ruIvIdoheZR/Xa2D01jQJRl1HzxldIWg821lPmTWjc61ly:kSjkt9ruIvPho/T+jQJRzz2WI+nP
MD5:	A2ECFE2F1EE4B65EDFF71FD02EEF82F2
SHA1:	F062D54119184483F6608C869E7D06A0FBBCE5BB
SHA-256:	E1A3C83144FA5752C8668CA056742EC9E6D6DFE5CFB75A97A9E53D1150068F91
SHA-512:	9F3386052A138F62A7CCBC50926F6B53EFB939FECCA7BFB78C398CC67FCC73E5B3D618B62F3A442D8009A354A0AE62B0973A26963AD4E660BB925B5CC3614571
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/en_bl.png
Preview:	.PNG........IHDR................W...nIDATh..Zgo.I.5&..\|&..B.%..q.#.....I...D.p.`@d.$s....d..l.q..o...O...........=^.C..%{jzzz._W.z.!_.~%.,3a.hf..f1D."[.5A...5....ema.k.e.....M....&.236B....PCs....F.v.Z.".5Y.5....:\.dP..h...6..L...........f.....c...8p.....T........i.h....G..9r$.X..222..Z......K.\|..[....7o....S.+...`.......J..1....".......:.%....3g..'66..x...=.....}Odd$..<.....:44..m...\TT....i.o?r.........X.*....X...>j...y.a.v.^.:W..p...W/.7n./pAAAP..(.}{...TXX..t:..s^.....X..-[(--.L......{Z._.<.{g..\|..\.......pK.,..O..[.n..........G.......Mxx8UUU}7`...b`.@.A.=.....T.p.........TQQ...g.d....{..!.p.M.S.^.,D#......6N.c..A...{.......'O...._\....r..Y.q#...W]]...........w..p..m........'...III..7o.L./_...Je[..E...s.N....c........Ox..M.kD.k..`s.......I..+.!.......]S......J....'N..'..k.I..wo..q8..9.....RX.N.\|@(...[.n>ma.x...o..q.....l:Dy}......P...#F........n..T..G..;....gB.g@.A.kZ...S.A...........T..>..v9.v....b...$.>,..1..........W{S

Chrome Cache Entry: 325

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.97177460040716
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoe4n:8DIGoXbfCYKpgrlywuqIQWOe4n
MD5:	16EA81CC65A05B05B549867D16256872
SHA1:	A054E843320C2B0DD2F087395C8E644C484B1590
SHA-256:	8DD2276BC3539358D9A3DFB8EAB4077FEA1861E8B3EF3AF58AA2C3F59FDAE52D
SHA-512:	ED3237D2EC490568C2409E4E77251C4767CCF62127A37D3BAE1A6CF03109365A54D8D616A598663E09F8A2111A4773616B64EE30BDAC4CF09CEF4B7A6C087AE8
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Chrome Cache Entry: 326

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 327

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 328

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5046)
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	5.176947472285005
Encrypted:	false
SSDEEP:	96:+vllJxvYaYpoVGe4QYqMvs5PPm2nrH84Mq9ixhmNbARVnKtRxk5REVS:mbvApkGdQnymPmsH/9ixWAznf5REVS
MD5:	35715D2368603DC299EEA4AD26F4EEE6
SHA1:	4725602608638B545D45C20AE806A3D8662DA87D
SHA-256:	C8D3D61A786370308A294AD9236DD9FE016542AF1F4D430E542AEEEDE87C8015
SHA-512:	3BE53DD67E167768AE278D55A12DA834DD5346DE2D4960C2B3BF9353DA40772E99D668E839B3C6EF8F981D70342E6EA1E0160458D4053D10392592551369F263
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012405101652000/v0/amp-fit-text-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2405101652000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?n:void 0;var i}var s=["Webkit","webkit","Moz","moz","ms","O","o"];function l(t){const n=t.replace(/[A-Z]/g,(t=>"-"+t.toLowerCase()));return s.some((t=>n.startsWith(t+"-")))?`-${n}`:n}function c(t,i,e){if(i.startsWith("--"))return i;n\|\|(n=Object.create(null));let o=n[i];if(!o\|\|e){if(o=i,void 0===t[i]){const n=function(t){return t.charAt(0).toUpperCase()+t.slice(1)}(i),e=function(t,n){for(let i=0;i<s.length;i++){const e=s[i]+n;if(void 0!==t[e])return e}return""}(t,n);void 0!==t[e]&&(o=e)}e\|\|(n[i]=o)}return o}function f(t,n,i,e,o){const r=c(t.style,n,o);if(!r)return;const s=e?i+e:i;t.style.setProperty(l(r),s)}function u(t){return`${t}px`}function a(t){return CSS.escape(t)}var h="i-amphtml-fit-text-measurer",m="i-amphtml-fit-text-content",

Chrome Cache Entry: 329

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 330

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	139971
Entropy (8bit):	4.9198314781133154
Encrypted:	false
SSDEEP:	1536:mYtjakc0aZDT/Zs4sC0jfjR1YG+s2Ltt99ac0eW53zzVCoYs2rhrXzgEA6SJB5LQ:j5E2tvYkUv1
MD5:	512410D9227BB0C2481E175DCE0EDA72
SHA1:	1DEB5D9F09592101E632A8351865D54B1D6A27F7
SHA-256:	C337D42ED7979C6BE0282900BD957DD9D112A430DC7761463D655EB8F0D9BC07
SHA-512:	855FEB227BB9448DE654BF5C616A2DBF71C4F97550A00A30372CB0AE2F7B0BD70B7A4430D84C8386934B7064D8BC3F66E926B5B2DD9920812AF96C3469743A86
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg. xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cc="http://creativecommons.org/ns#". xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#". xmlns:svg="http://www.w3.org/2000/svg". xmlns="http://www.w3.org/2000/svg". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". viewBox="0 0 509.7 132.02". version="1.1". id="svg4223". sodipodi:docname="logo_text_de.svg". inkscape:version="0.92.4 (5da689c313, 2019-01-14)". inkscape:export-filename="C:\Users\u230023\Downloads\logo_text_en.png". inkscape:export-xdpi="96.24485". inkscape:export-ydpi="96.24485">. <metadata. id="metadata4227">. <rdf:RDF>. <cc:Work. rdf:about="">. <dc:format>image/svg+xml</dc:format>. <dc:type. rdf:resource="http://purl.org/dc/dcmitype/StillImage" />. <dc:title>Element 1</dc:title>. </cc:Work>

Chrome Cache Entry: 334

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	53810
Entropy (8bit):	7.996512262298674
Encrypted:	true
SSDEEP:	1536:HlSmme3D4Rab3mS3P+MikSOXYaGhyPU5VBdRzeZxpw91:gSb3mS3P+aSOXYaGwGBdRz6xA
MD5:	B591D522278CF628EAD05C51B19649CC
SHA1:	9296BE481FAD7DDC3CD85B2BEE91B1557A011631
SHA-256:	2234CD9DCA8568B075FCA4DA1C29FA0604EF59122F950B9C9290A757EC0F7C32
SHA-512:	7ED72553782E8B213E0C0FE57122B83C81C9CECFB8B9ECDA688F2684F4BD39D8D5D88B1712ADEAC688E34A289AE3E02D1AC17D86D9533BB33E4546D1DE46A378
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=522793913156512&correlator=1446924010392997&eid=31079956%2C31083632%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDW.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&fsapi=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339726&lmt=1716105411&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&vis=2&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283340&ga_hid=421100937&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283332631&idt=6344&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=sesspv_refresh%3D0_0%26refresh_count%3D0%26pos%3D1%26tabVisibilityState%3Dhidden&cust_params=page_num%3Dundefined%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse&adks=4031254382&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	S..Rf.......<.EY..a..=i.............o......!08&..l..\|~..O.........W...............B......~.:..f.&#..2..X..6.z.....H30.....5.c...;...p3j..l^.........z..."(...Y..P...\$.Q@./N..>.....U{....=.B\|..?4..g.h.....tm.....V.ppP....E...!!HXv...z.....K..wG]4Bb...@.....\.Z....!.......y..H..J.C".V.v8......<O.m$.......K..>....3...P..HiA...~"$.$g..sH.t..wvns....z.?..Kw...WfZ.3.....R......OK..>.YY}l5.#.x`@^...(?.b......i....;..$7..=)....... W.<.?..0..W.._:..o.o.iH..a.../....`4.....X..;.0...@.36.qs.b"Q"....cYd..4ED2.}.l...V.o.X....]2Z.i....z..4.......e......%...u....GnU.X?.....0...,m...m..c,..... ...C...?..K../,{!.M.......B.xuYd.~...2.K.2.D.Y8U..Dq..,..%.'......R.p.U..]#....._..W.cU.....[../...n..............4.9.......i../..D....5.z..w..zl.4...../.8..B.f.....=z..}.9.#\|....moZ54..[.......WLn...;[MY/..>.u..q......;..x.=Cs7..p\d8......F\|.MW,.R....k.f.8..w...ak.T..;.-.V.+o..`..nT.......B..l6.=..x....t6...;.O..m...i...f.O...?.h^..E.R..g..:;.....v9...!.8..B@..$0....".I

Chrome Cache Entry: 335

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKof:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeX
MD5:	D77C176FB63BB863F4E64FF0455C7A57
SHA1:	E9BCC0DCF53EA20D1BBFC0F404C722248A8A170F
SHA-256:	B84716F9879584BCE46488B8FDDC4BC73E1B25E0C7401061C2A0B864C6F45165
SHA-512:	A26A77D69F7E6D3743CC90EA7E1177E26B5550C2DDF7D4B1DB38E588308E2BB38D49EB9F9935EA63FB10765898486B6E6AB9F1F57192EEE97E98AEF37725E7BA
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=0&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 336

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 58065
Category:	downloaded
Size (bytes):	26416
Entropy (8bit):	7.990528021092053
Encrypted:	true
SSDEEP:	768:WYH2SrEIdEt/eLfk53jh2wqHr5mVXRNDEOPkT7LaznN:WYWF/gu3NAH1mVXHo9naR
MD5:	88D49932C3F3431D155686FADC1C32A2
SHA1:	A8A1840CF565E071C32B1026156FC305A94A09A2
SHA-256:	F46705588406BDCEA74EAFC60A20145607D845C097F629F2AEB5C747C1543286
SHA-512:	7135959C6C94F129480358F1D9590C541A845A61179204881A167317937439D56655045760EE04FF48504FA5A0EDC8083F9540FBEE7EC9F551B92D0C589E912B
Malicious:	false
Reputation:	low
URL:	https://static.kueezrtb.com/js/latest.js?_=1716283338721
Preview:	.............W.J.(.......M.fd...q@.EQ...Y.:.B.@.w.....:.8..w... .....Rx...4.#...Z.."...5.....)..32_..6..v.B..m..A.@\K?......lG.)...VT...0d...?..B:R.k?......u}....#...v....B.,.q.7...`.Ft2....r..l.'....E.....m..w.....WQ..U+.+...! .:..u..=:+.....UM.%...Z..?.Z..eM...0........%....).?.q.s..>...Q.......?..}......M+.k....\r.....~"..b.......8..._\|<z...". .$....@.~.k.......h......53.K.~A\{.N....W.L.j.....pPH.K....Ee.`....?.?..c..u......U....5a..).e.........r~.........[.eO.V?.R.B....;p!......I4........W,..E...W,p......a..q..rs.0....%...K...ZTx...c... .zJ...&".TU....].P.<._.4..D.B.?~C.Y.hs!<0....d...Y.@E..uV$."...~VX0~..<]\W\. ..S..T$4..{..I.=...6.WF.{)r.^_...a,.....(...V..f.p..%.K...ZE.+W.l.^..a.......<.$;8.,.$...5^..0....C.......R.Ti..[.p.U.0..n..I.d\n..xZ./:..6.XEq]!..._.=.y..xz.+..u....[.@uR...J`(..m`~..F.<^...3~t.n..%q.k...e.......w..t...S\.-....2..4.eR.......\......+.....`..h......v..o..N.@.D.)FVl.N....}...DX.k.S.....

Chrome Cache Entry: 337

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.51081643234236
Encrypted:	false
SSDEEP:	3:rgR8UA5fwvlSQOyoYFa/Cb52mB8k1r5lmAocnYU//j0Pl:0RK5YwyoYw/Kbh5lxYU3jUl
MD5:	A4981C231B0CB2E2D9641B23665E284C
SHA1:	88FCA2242AAFA3973591323DB605AF36A8085B2A
SHA-256:	F6A53C193F9697160AF61FC8634D90B1498054C3BC773CECF4AF062E1B9ECB4B
SHA-512:	4D8766D7F4E496B67ED1E7A60F21AAC68AC38F4AEACD72F1E56529E9A22D7091DE69E9B441AFFC0ACA8FEDC30D289B0ADE2305DB18A05A445ED0AF344DB73235
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=522793913156512&correlator=628393446366730&eid=31079956%2C31083632%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.D&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C160x600%7C300x600&ifi=3&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339739&lmt=1716105411&adxs=790&adys=558&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283340&ga_hid=421100937&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283332631&idt=6344&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D4%26monu%3D300x250-160x600-300x600_B4%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_1000%26auction_id%3Dfb6b612b-9fc6-4a8a-b899-74586e40a453%26monu_df%3D0.08%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.08%26hb_size%3D300x250%26hb_adid%3D12854ca123fdf0e4%26hb_bidder%3Dkueezrtb%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.08%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3Dundefined%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3801477003&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....y..xyr3^.N..Nx.........L.s...H....gU........5.m...../.$KN..K..K.....V.g..]..u.:....!y.9._]..d.c....s...m....\|Ngc...Z...Vs.t..?A.

Chrome Cache Entry: 338

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	19619
Entropy (8bit):	7.988064429905515
Encrypted:	false
SSDEEP:	384:YVyXI4SqA3WVxx+R/9+tWbPonIvWxIgg6l7gE1KTJ6gkqNbbcyuf61hOXW2:YUXPFQOxxq04roIvWikl7gcsGabcHO4J
MD5:	64AB7E08D2080938DC586E63F29E0CED
SHA1:	84168DD4C22C54887AE5D64B7B5022E5373892B4
SHA-256:	05EA3EDB5FF1AC5A983D1BCABC6CEF2A54C021382C53D27E75130FCC960D658B
SHA-512:	7250C8D0869D964DEB4CCD725846D1584BE249559B3C1533A84906FDC18A00CFE1CF07658783760CED50D8E44504255B605EA522A79BB0A0C56890FF32BCAC76
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=3694190675249568&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDH.C&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=6&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342295&lmt=1715994881&adxs=268&adys=45&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=728x0&msz=728x0&fws=0&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D3%26monu%3D728x90_A3%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_header%26allowNative%3Dfalse%26bidder_responseTime%3Dconsumable_600%26auction_id%3Dc2c2a659-393e-42b2-82ac-eee8f38bc487%26monu_df%3D0.93%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.93%26hb_size%3D728x90%26hb_adid%3D238cf4b847969732%26hb_bidder%3Dconsumable%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dconsumable_chrome_0.93%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3029960922&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.c.3.6.u..HM..P..1n._...U`.n.u\...M.....4YV.d.nIP^.)}z..v..)..4..N...m]....7.(.kA..2.=.,b.=.M.}../.V=...K4.._}. .9....z...m...K...`2....OG....I..M.L.Ar..g.\|v....y.9.$....}..7......@.. Y..3..A.......av..SW.pN.]?[%r..<8....$.w.".."....E.".H.]. J]d.....{.W..I..$n5.....)."..&&cbO...bP.p.6.b..kSG..G.i"s....N.#...1U....UV....%.7..w...+?x.6dtzz.0&.0Gx....2x.}%.E.j}.L...............?.%<.....l...x.................`.....E[...wq{.z..w..&.f..n~?...8...5..s~.c...V_.//...u.....;.t.W..G..h.~......?..~~.2}z..prr....yP.N.....I..k..>.^m..O.(......+N....`...2..=.C5h.S\_...pjx^]...U%Uy...h~......O..^.>t.$.....f.wiA..{.d.K.2#p.......9.v.....Mk..kr..+.o-K.._..:)j.?.z......h.]...n?......dt.M..in..:Z.Z....c.#..kT.}..B..jn..[.}}S........9.wtqK....K... .4..X...S.A...2.~?@..6.......l(..Y.q../....S?H.N.`.Z.v@O_!...=...w...D.eTz...b.}._.{.<\.**...Q....5.^[...m. ..!:.(...Qu..Xh....E&.@.@.....'..c.a.Z........'6...@_..v.8..... E.&...@YTQr.l.2...t.T1...yX...%.9.M.\.....

Chrome Cache Entry: 339

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3440
Entropy (8bit):	5.001916687024959
Encrypted:	false
SSDEEP:	96:Ry8Gwm3zhMtwFbd4cc0NIb/C6HJDO6q6oNEH4JQX:Ry8GD3zemMt0UCj6oKYiX
MD5:	50AF777820DBE4691874B0D3AA96B683
SHA1:	47D32EAE80916E3F10167FC4108D482A477C1240
SHA-256:	2164CCDA35EF9F1994988C3854E7941905FFFA2B6EDF0A2F32826ADA9B4C3ED0
SHA-512:	D4B10AF1C18F3A390000C8F68E5270E869A085E783DF9DBB57D24E5546290880DFA780DBAB3F5CC2121F6A9797AED026D606A6989A024D17558EC29458BCFB24
Malicious:	false
Reputation:	low
URL:	https://monu.delivery/assets/scripts/vendors/xdomain/1.0.8a/xdomain_cookie.html
Preview:	<!DOCTYPE html>.<HEAD>..<script>..."use strict";...window.IframeShim = (function(){.....//orign & namespace data is passed in via urlencoded json object in url hash....var _hash_data = JSON.parse(decodeURIComponent(window.location.hash.substr(1))),....._namespace = _hash_data.namespace,....._window_origin = _hash_data.window_origin,....._iframe_origin = _hash_data.iframe_origin,....._debug = _hash_data.debug;.....function _log(){.....if(!_debug) return;.....arguments[0] = ":XDC_IFR: "+arguments[0];.....console.log.apply(console, arguments);....}.........//basic cookie getter function (returns object of all cookies key/val)....function _get_local_cookies(){.....var cstring = document.cookie.split(';'),......cookies = {};.....cstring.forEach(function(cs){......var vals = cs.trim().split("=");......if(!vals[0]) return;.... cookies[vals[0]] = decodeURIComponent(vals[1]);.....});.... return cookies;....}.....//basic cookie setter function....function _set_local_cookie( cookie_name

Chrome Cache Entry: 340

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=7bde16b5-414f-4c99-b45a-259240a801e0
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 341

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 342

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9187
Entropy (8bit):	4.699698533171508
Encrypted:	false
SSDEEP:	192:vsSXj+7mWdlaHI5Su3KjRN1nS8LnupnVbZYBkjFoJXCyTxyR8:c3OMFoB3
MD5:	3A38A4C45E3AA46A58E390F0B0BAEBFD
SHA1:	E578F9A058050680EA5FA55EDC15617628EE6314
SHA-256:	DC3A0E2E935E1287780338713472A6AB77CFDDCD82259C9D6BB4317DE0D93898
SHA-512:	06274E1E53363A806B742DEEA42BDC8446148D0F49DCE0187D586B0329190B352E510EDA0116B2675A5C13C7BCE958E5F9CF03FE3B9F7CE78C15B7233D3CCABE
Malicious:	false
Reputation:	low
URL:	https://cdn.adswizz.com/adswizz/js/SynchroClient2.js
Preview:	var com_adswizz_synchro_register_VERSION = '2.0.16';.var com_adswizz_synchro_debug = false;.var com_adswizz_synchro_utils = (function () {. return {. /*. @description. * Utility function.. * @param {Object} source. * @param {Object=} properties. * @returns {Object}. /. extendObject: function extendObject(source, properties) {. var defaultSource = source \|\| {};. for (var property in properties) {. if (properties.hasOwnProperty(property)) {. defaultSource[property] = properties[property];. }. }.. return defaultSource;. },. /. @description. * Utility function.. * @param {Object} obj. * @returns {String}. */. toQueryParam: function toQueryParam(obj) {. var str = [];.. for (var k in obj) {. if (obj.hasOwnProperty(k)) {.

Chrome Cache Entry: 343

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=p.d.l&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Farticle%2Ftop%2F926%22%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 344

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	308515
Entropy (8bit):	5.563606088837104
Encrypted:	false
SSDEEP:	3072:9W44gEx1awxu4Y65TivNurS8/CuTF04kaw/FCnZtQ/tvR7ejp24M0yYB/Ohhwavz:g4o44Y65Tiv/UaXdMZtQVvBz0TB/0hw6
MD5:	DA10913B8797EA8863B7A550130EFEFF
SHA1:	7BBBDAD97B964E9C4465D5AFBFB2A68D09D1B76B
SHA-256:	60AD2F0E59BF6A01D05B3E3F20AB5F2E1933B6F199A70E05C727470E8E29C49B
SHA-512:	AAA514659E5EA9A96DEFAB1BF2568442A0715AB8430643C1AD64BC28C7B02713CF2D57FD3F0F7FF0CD85DDE6B46CFA7108F1344EB7284C2B94516C1398247258
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-54725HQVMF
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":13,"vtp_instanceDesusertionId":"G-54725HQVMF","tag_id":25},{"function":"__set_product_settings","priority":12,"vtp_instanceDesusertionId":"G-54725HQVMF","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":24},{"function":

Chrome Cache Entry: 345

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920)
Category:	dropped
Size (bytes):	152648
Entropy (8bit):	5.614701027979591
Encrypted:	false
SSDEEP:	3072:jlK3p0Mk3ZyIS+JD1h0fiaZ28uDpNiUHLYIJUL9FGqi7lPw0XNKHpJhgRNsTK:jw3pk3ZyIS+JD1h0fE8GDiWLYmULqqin
MD5:	42209AFF04FA6D7CBAC728DBE7BD1FC3
SHA1:	D00B2DBCFDCF0D25ECC14E9039BA4FA0B30488DF
SHA-256:	2137822102A75C9FD244D61C1EABFCE196445BE537A562BC93A10F27CBDEABFF
SHA-512:	5F5C3E02D2E580B82E0DC8E63FF766E6FDFBC26538AB17619E97EA673F51767D3BC2AF310F13256ABB04C851C0F9D94FC8D97EB9558CEB6FB9611A0DB82FFA66
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 348

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 58065
Category:	downloaded
Size (bytes):	26416
Entropy (8bit):	7.990528021092053
Encrypted:	true
SSDEEP:	768:WYH2SrEIdEt/eLfk53jh2wqHr5mVXRNDEOPkT7LaznN:WYWF/gu3NAH1mVXHo9naR
MD5:	88D49932C3F3431D155686FADC1C32A2
SHA1:	A8A1840CF565E071C32B1026156FC305A94A09A2
SHA-256:	F46705588406BDCEA74EAFC60A20145607D845C097F629F2AEB5C747C1543286
SHA-512:	7135959C6C94F129480358F1D9590C541A845A61179204881A167317937439D56655045760EE04FF48504FA5A0EDC8083F9540FBEE7EC9F551B92D0C589E912B
Malicious:	false
Reputation:	low
URL:	https://static.kueezrtb.com/js/latest.js?_=1716283323756
Preview:	.............W.J.(.......M.fd...q@.EQ...Y.:.B.@.w.....:.8..w... .....Rx...4.#...Z.."...5.....)..32_..6..v.B..m..A.@\K?......lG.)...VT...0d...?..B:R.k?......u}....#...v....B.,.q.7...`.Ft2....r..l.'....E.....m..w.....WQ..U+.+...! .:..u..=:+.....UM.%...Z..?.Z..eM...0........%....).?.q.s..>...Q.......?..}......M+.k....\r.....~"..b.......8..._\|<z...". .$....@.~.k.......h......53.K.~A\{.N....W.L.j.....pPH.K....Ee.`....?.?..c..u......U....5a..).e.........r~.........[.eO.V?.R.B....;p!......I4........W,..E...W,p......a..q..rs.0....%...K...ZTx...c... .zJ...&".TU....].P.<._.4..D.B.?~C.Y.hs!<0....d...Y.@E..uV$."...~VX0~..<]\W\. ..S..T$4..{..I.=...6.WF.{)r.^_...a,.....(...V..f.p..%.K...ZE.+W.l.^..a.......<.$;8.,.$...5^..0....C.......R.Ti..[.p.U.0..n..I.d\n..xZ./:..6.XEq]!..._.=.y..xz.+..u....[.@uR...J`(..m`~..F.<^...3~t.n..%q.k...e.......w..t...S\.-....2..4.eR.......\......+.....`..h......v..o..N.@.D.)FVl.N....}...DX.k.S.....

Chrome Cache Entry: 349

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2413), with no line terminators
Category:	downloaded
Size (bytes):	2413
Entropy (8bit):	4.683744865069312
Encrypted:	false
SSDEEP:	48:y1TQsDhoumyHO+THSeHcHrnenhmT/r4XE0Uhnhm11nhmS:yRpOAO+bSEyrzTF0b0S
MD5:	07E399DB70F111BBC766928D9DD6DC12
SHA1:	C157491D391B4FD8B9E629E95A8D9555B4A07636
SHA-256:	CC3A41863D92B22799FF23C52E2173E80B13EBC75B9144151EA105CD52B59DE5
SHA-512:	0C57030BC2F8579DD1A19BFE3CCFF365CE1DE782E541A8DFAF89545BDEFA9561B00945C8662F1C06AF1526780CA05CBB6E74EC29473429AD25ABDF3D3424819F
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1931.004-3.034/frame_content.js
Preview:	var IL_FRAME=function(){var i,o;return{init:function(){var n;window.top.infolinks_pid=window.infolinks_config.pid\|\|window.top.infolinks_pid,window.top.infolinks_wsid=window.infolinks_config.wsid\|\|window.top.infolinks_wsid,window.top.infolinks_advtq=window.infolinks_config.advtq\|\|window.top.infolinks_advtq,window.top.infolinks_iframe=window.infolinks_config.iframe,window.top.infolinks_basePath=window.infolinks_config.basePath,window.infolinks_async&&(window.top.infolinks_async=window.infolinks_async),window.infolinks_ddw&&(window.top.infolinks_ddw=window.infolinks_ddw),window.infolinks_config.inplace_slot&&(window.infolinks_config.inplace_slot.id=window.infolinks_config.container_id,window.infolinks_config.inplace_slot.width=parseInt(window.infolinks_config.inplace_slot.width,10),window.infolinks_config.inplace_slot.height=parseInt(window.infolinks_config.inplace_slot.height,10),window.top.infolinks_slots?window.top.infolinks_slots.push(window.infolinks_config.inplace_slot):window.top.i

Chrome Cache Entry: 350

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 55651
Category:	downloaded
Size (bytes):	18623
Entropy (8bit):	7.985353005461742
Encrypted:	false
SSDEEP:	384:OX4KiKMNewmjJS2bkfrDsCD61036VJDhQJRtW+vf7To5Z:OvMUJE2bCrlD686/GtW2Tob
MD5:	EFBD4F962E2FFB873D32C788047ECE87
SHA1:	2CC8B02A51679F60E87E2A819A3AE329EFE25EFF
SHA-256:	999BFD7061623A2035A94CE5987C1F7ECCB8EF0334049551EB60A9DE72981319
SHA-512:	65621162120271CA5B7D2BA846155D7865C97F12F936CC6EF996D82005F87E125C2412722893B39ACF2EB80D21194F7356A5B2D78BB441FB7CE98A62E8132530
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?o=5761653252554752&upapi=true
Preview:	............}W...(.....Fg.Ok[4..$cGa. .....$.g.?L.[..m..%c..w.-.u.....9..fB[.JR.TUI[7......>..'-.r..0.....^nN."g-..'..X...t.,@.\|...@......8...a..)aSq;d/..u:...-.Z....1...y&2.8'.m...C..I...8J.@.......c,F....}+D.h>O..qK9P......A.1.f1........lF9.0......t....8.!#." ...H.....V.t.C..<[~.<Vi...$L2F...Q. p..l..hQ.E.b....0.l1.f..H ..B..[..Ep.....v.AB...B....KJ..7.0.Q.(..S.MH:."N..x.Ao.^;.u.P....zc7&.{.D....1.....eR..j.DA."]v..=.L. ..p....`.x".i]<.&Y.n.td>CH..,.7....Dt..-r..h=..1.,...sr..Y.._.3u.(oEiN..E.H...MC.......Px.h.....t.....6....H..9vY.....s..p`....[A.].....I.2..../.b3..(W].G.Z..6.C.~.8....?.A..p...n.....a....t..>P."U.`..2.....c.@.;.....-..{>.8..9...<.(.....%hBn.E..&P.5@H7.H.W.v;.._.1.....U.v.~A...n.vEo.]..\JE.\.V./...e...azD.}V.../.......P..}.~..?F....6...R...7zhE.0.@P.K.<z...q.].P......9.j.5.X...D-..;>P...&.....j..(..p.Z)..1..b..;;Q......1dD....).9.oq.....l1II...N..D.4.XH.. J.n......z.=\.^;J......2J...Bp._..D...^.`.y...0.X...8...t..M.1.

Chrome Cache Entry: 351

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16559)
Category:	downloaded
Size (bytes):	16595
Entropy (8bit):	5.257610671511415
Encrypted:	false
SSDEEP:	384:llcwPCZVWO4HIz1FsWgw8S1WG3fDQkgJ+mtZyrZCuWS:U5FZPD1WMfDavutCuWS
MD5:	661E6ABE0A5412C54B6FAD71BB67C591
SHA1:	0E36CC51DC77A6D265F529F11BD5D5A1CCF886FE
SHA-256:	719A1764B0D9860BF828AE412AFCB86C0D38E8E0E3C1A3781637F747B22A0C8D
SHA-512:	2C7A883BDFF2A9FE76462D09EFD378E5C1C3FCB757BFE5C9BE70DF2F8489A59B5F859AC25336ADC8638468D6720774F64B89A3526CE1AE641CEA292901DE86D5
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/cframe.js
Preview:	!function(){"use strict";function t(t,n){q.forEach((e=>{try{e(new Z(t,n))}catch(t){}}))}function n(t,n){return-1!==function(t,n){if("string"!=typeof n)return-1;if(null==t)return-1;let e=String(t);return 0===e.length?-1:e.indexOf(n)}(t,n)}function e(t,n){void 0===n&&(n="");try{return atob(t)}catch(t){return"string"==typeof n?n:""}}function r(t){return Math.floor(Math.random()t)}function l(t){return new Promise(t)}function u(t){let n,e,r=l(((t,r)=>{n=n=>{n instanceof Promise\|\|null!=n&&n.then?n.then((t=>{u.v=t})):u.v=n,t(n)},e=r})),u={v:null!=t&&t!==String({})?t:null,r:n,o:e,p:r};return[u.r,u.o,()=>u.v,u.p]}function i(){return Math.floor(Math.random()(Number.MAX_SAFE_INTEGER-10)).toString(36)}function o(){return[i(),i(),i()].join("").slice(0,18)}function s(t){let n=[];return Object.keys(t).forEach((e=>{var r;null!=t[e]&&n.push(nt(e)+"="+nt(String(null!=(r=t[e])?r:"")))})),n.join("&")}function c(t){if(null==t\|\|t.length<2)return{};let n={};return t.replace(/^[\?#]/,"").split("&").forEach(

Chrome Cache Entry: 352

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 353

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=b.r&u=7bde16b5-414f-4c99-b45a-259240a801e0&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 355

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (52794), with no line terminators
Category:	downloaded
Size (bytes):	52796
Entropy (8bit):	5.3840551492809485
Encrypted:	false
SSDEEP:	768:G1ufR9ocnHfbIPweh1SpoWLTm12wVBBNuXEXCwitq9am/OUlzO:yg/HKtbXj/OUs
MD5:	5D00EF498CFA368F77A4C6EA505798BB
SHA1:	5AC1A137EB0CBA2FA5FD17165C88E8C06BE5C557
SHA-256:	2D02BD546E9C6132DE3B96E5B5F25835F0992D2B28ADF090B708422ACC03FE2E
SHA-512:	AEA63E59DECF446CCF26193134C07390335913D444E061B60FBE26F418773505ABAB15A24F1B40D8EA5D5B195F03038F37ED7F76C60A34CFF0BD62096680E739
Malicious:	false
Reputation:	low
URL:	https://cs.seedtag.com/cs.html?pt=5261-2296-01&pc=US
Preview:	<!DOCTYPE html><html><head></head><body> <script type="module">var e,t,s,n,r,i,o,a,d="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},c={},u={},l=d.parcelRequire2284;null==l&&((l=function(e){if(e in c)return c[e].exports;if(e in u){var t=u[e];delete u[e];var s={id:e,exports:{}};return c[e]=s,t.call(s.exports,s,s.exports),s.exports}var n=new Error("Cannot find module '"+e+"'");throw n.code="MODULE_NOT_FOUND",n}).register=function(e,t){u[e]=t},d.parcelRequire2284=l),l.register("f9AGe",(function(e,t){!function(s){var n=t,r=e&&e.exports==n&&e,i="object"==typeof d&&d;i.global!==i&&i.window!==i\|\|(s=i);var o=function(e){this.message=e};(o.prototype=new Error).name="InvalidCharacterError";var a=function(e){throw new o(e)},c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",u=/[\t\n\f\r ]/g,l={encode:function(e){e=String(e),/[^\0-\xFF]/.test(e)&&a("The string to be encoded contains cha

Chrome Cache Entry: 356

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.080128836461764
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCfCn:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr14
MD5:	4162E1D58259818C0D9B6A82A0C98776
SHA1:	316C674593F7484A2358D33CEA5DEB649CE2B666
SHA-256:	DDC03730E6EAE0AA6F1C782B44F76616741ABA57131D31C5F607AA072B3D77A9
SHA-512:	FB9D990EA698B296771199D28FF524C8F1DD81537FCAD306EC3B15BB0643AA6F1DA8683CCB58BDEF2110111377AF1D2003F65D29277786CDE0F174BF098FFDCC
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"16"})

Chrome Cache Entry: 357

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	14794
Entropy (8bit):	7.985230043916689
Encrypted:	false
SSDEEP:	384:ZlBMHoZj4yIelU1lBtlrfFtJaf7Rtw6g8R/clL/XU3:yIZjholF9XGw6gRlLw
MD5:	21A6C8E449A6E550A008C01961D3FFD7
SHA1:	027796D5139A4689AA02A75A73633963E48EE17D
SHA-256:	2C072C96F5C80A81B8444B7E3CB161CCA1B9FC5B057570B672E0BD1CD02A0EFA
SHA-512:	9702385700A481A3B13867D913F6EA8857D546EB2D664BA71D8543D867BE9B0616C17A0E6DC70134A7DB5F69E39DEF8E1316A2DCCD39A1A7CE515A17C1DF6706
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2273347548520925&correlator=4122360000860864&eid=31083354%2C31083555%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=9&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283332600&lmt=1716004133&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2F&vis=2&psz=728x-1&msz=728x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283329&ga_hid=310703479&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283320832&idt=5735&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D2%26monu%3D728x90_B2%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_bottom%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse%26amznbid%3D2%26amznp%3D2&cust_params=page_num%3D1%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=313124495&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	S...EM..z...Y=..)........Kg_.....{L[U....3.!.lB4.P ..U....t..y.?.[..oV....dl]).E.\...@!V.a..(%.?..?3[..T.v.....c(.........~i._3vVc.!.f.=.G.K..l...3..Y/......l....K..e..]N.E.T..H..J.f....rd!...Y...}Q...Q.q....Z...(.i...;...b.Sa..o./.t.K....jk...........u..&.t..(\..w.0.3..%T....0..ca..%..M.m.xR.aR!0.+}I(1...C..:....4.....l..=$i6.......?.,..gG...%/5L(.`b..S...\.(....d.S....$..W.$.n.F.(D.M...Q.z....&Y.....(.E......n.5"..w.....I..r......lS.f...ZBWM..>..&...].\8L.x..V...X..H...I.........h..8.s.Q..5z....Q .RbYju.&..Yy...V5=\|.....g...d!...O.G.f...X......v...e..d.g-jg...U.nb.d.mj.x2.dp.?>..!.Yj.z...r[%.f....T..U..t<p.+.+/...:..}..iYg.rY:.......(S.s......F\|.k.IK.H..z/ ..i.~....h1\..(.....}U....{j...AL..Is..,qt.P"b.f...Z.zL`9.H..(..B...!...f....g....$ns..3!...$IV..A..5..eG.m...U.&KXjVU..1..@..c...7T.....h...Y.+F...n.jw.<?....i..w3bf....W..^...g..R.@Egh.....&{.B..\|..0.......;.Z..r>.*...+.....R..]..T.Y.n.vM.Y.Z:......h...8:H.G.l-.U].H...\:.)...X.

Chrome Cache Entry: 358

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1183
Entropy (8bit):	5.3080799003641665
Encrypted:	false
SSDEEP:	24:YsrMjMjDtU2Hjjz58uJGdVg+VBGdltdlDsu1AeeW81e8fUQdiaVqY:YsoUDu2/9NGde+VYd9lDZAC8PfUKiuqY
MD5:	76B9FBB76B8F5CA1D0F05C01361039B6
SHA1:	A4FFEEEADE966CDDD21B215DBB2CA78426042300
SHA-256:	A2ACB78F4EBCAD0F71FBBFFFF5CB7F8DB068726D90923A1CDF5CCE1ACF592598
SHA-512:	8D55EADFC01A7CFA8FE59F6967C8022E9EDE3B2D78E166D21057DBFE49EF612B317A75197D748146B982E974B9B3ABD7B4FB269F1FBAEC1E3D842EE442A16E54
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fcustommapposter.com&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a
Preview:	{"3pvendor":"var blockthroughPropertyId = 'AAX8RN661';\nif (!window.__bt_already_invoked && blockthroughPropertyId && blockthroughPropertyId.charAt(0) !== '%') {\n createScript('https://btloader.com/tag?aax_id='+ blockthroughPropertyId + '&upapi=true');\n}\n\nfunction createScript(url){\n var blockthroughScript = document.createElement('script');\n blockthroughScript.type = 'text/javascript';\n blockthroughScript.src = url;\n document.head.appendChild(blockthroughScript);\n};(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;var id5PropertyId = '1013';\nif (id5PropertyId && id5PropertyId.charAt(0) !== '%') {\n var id5Script = document.createElement('script');\n id5Script.src = '//cdn.id5-sync.com/api/1.0/id5-api.js';\n id5Script['onload'] = function (e) {\n ID5.init({ partnerId: Number(id5PropertyId), provider: 'aps' })\n };\n document.head.appendChild(id5Script);\n}","3pmetadata":"[{\"propertyId\":\"AAX8RN661\",\"vendorId\":\"acceptableAdsExchange\"

Chrome Cache Entry: 359

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.965323240314742
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeO:8DIGoXbfCYKpgrlywuqIQWOeO
MD5:	64054D2F539B89F9F8F392F92AB61E3F
SHA1:	B779E2C1B8EAB8206DF5F4515C60A416C9CD2C18
SHA-256:	CACDE0D17DB53746723C2C56268C14D6CAD7D3B96A9741866C30484AB9ED74CE
SHA-512:	6719E1545789BDAC4F3C4DA4435D1530F265F0C7667B31045F16A88B0DBA15A24A025B5178E9AFCE6FDE1AC70619A4AEEA664219632323BE95424E7FFEA4963D
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Chrome Cache Entry: 360

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.080128836461764
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCfA:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr16
MD5:	C20CCDFF3EF5EAE62FECFAEC838F56BF
SHA1:	15B937D68BD0F876DD91910F5FFFA7082F336CED
SHA-256:	E14ECFCC19DCE5FC746A119F0867040202E7C55F2E07A5F6BB025A4EF3FEFB4F
SHA-512:	FD617E765E509CBE1EBEEDD81C4BDD44B3C8D140F0D518D4B74680E85CA4E0EA367FCC6B197B8C0A2E841370AC9846416092285FD66348028883E437C3029A9B
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"14"})

Chrome Cache Entry: 361

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKoL:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeD
MD5:	B5DD818013A5559B06C4BA3D1AAAF3B2
SHA1:	2313FB780AD0794A8617352E5A99E6D0249A3738
SHA-256:	09F786A6D156FD29C7D878F979AE105F618B43A2FEFA7534E9860DEDE02A7679
SHA-512:	9000F8B8BAED029106BAC9B3009BEC8D3B38BA1FA27352BE7A664C062FA420A3EDFA9E4ACA7C826A639DA93F8FC5C7D66A219B9007BDE51DAC29C40B5C4B7976
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&pid=nuvrykVNik5mU&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Chrome Cache Entry: 362

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.9767834199139562
Encrypted:	false
SSDEEP:	24:XwmdP8m8m8mUm3m8m8m8mhchhVX8m8m8mh8mxm8m8m8mh9m8m8m8mhTm8m8m8mh:XJzll9WlllhchhVXlllhlYlllhclllh+
MD5:	6D866D9C4568BF7FC03E597E74CE7E28
SHA1:	E1B3D9F0E9CDCB785A94B6C1E1FE651A4FF98DCB
SHA-256:	7C1925DA382279A72F94990D0A1456F78918619F35780EA0905E4AE0DB684677
SHA-512:	7DC58E58FC991E2C9310E22A6761AAA398586082C13FD7863FCADD48E15CEF8ED7337DC33D0ACC0D0B9B698D4D26ABBBE6995FA48D2C9CE1161B2F39FEA2A381
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/ch/104c5/img/favicon.ico
Preview:	............ .h.......(....... ..... .........................64..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..64.." .........................................................." ..&%..........................................................&%..&%..........................................................&%..&%..........................................................&%......................................%#......................&%..43......%#......%#......%#......%#......%#..................&%......................................%#......................&%..&%..........................................................&%......................................%#......................&%..&%..........................................................&%......................................%#......................&%..&%..........................................................&%......................................%#......................&%.." ........................................

Chrome Cache Entry: 363

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	6.6702497133271885
Encrypted:	false
SSDEEP:	3:r9p1+CLUzbPbIRn0VM8OuHjNXXBVX0hqQYFDOqRMlLA+CdL6iWbpDSX:31+bJjNnLYlYFDzRMlMlL5Wb2
MD5:	EE1C5801B717EB0D97CDB16C21FA6D01
SHA1:	EC8FDA7631288339CC9C0E7FC0ED80147CB8BA26
SHA-256:	00BC5AA7213FBA79455F79E07C96A87E1D56462741AF8736F92D6F7B2ECA12EF
SHA-512:	C0ADCA32D0B072E0A3052833D9821883C4357D58B77C54D177F188DA07DBA226D2B2B4F47932F3DF454B9A574D412F92E083E918F40F1A6D8DB7F31DBD847DE7
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=1779650276546712&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=160x600&ifi=15&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283334424&lmt=1715994881&adxs=1095&adys=446&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=c&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=160x-1&msz=160x-1&fws=512&ohw=0&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D160x600_B6%26slotNum%3D1%26placementNum%3D2%26allowNative%3Dfalse%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dtrue%26refresh_count%3D1%26lre_rc%3Dtrue_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=222636669&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	....D.....>h7~..np..x...>M..>.....8........$.6....L.8.F.bi.@../....$.p..W....R?...K;y...s.?.L....t.4.@4..:.*...X..N...Y#.<..hy..........

Chrome Cache Entry: 364

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 365

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 35
Category:	downloaded
Size (bytes):	58
Entropy (8bit):	4.486125281070731
Encrypted:	false
SSDEEP:	3:FttCSEVsbX7:XtC5VsP
MD5:	FAA2536347ECDF485CF5BC94135A5FDA
SHA1:	BDAC3D5CA7FCAE7C68ED542C7FF20CBEE0814E58
SHA-256:	EE3BD8D781681EC388E38B048BB0AC3B483C2B980AC6EA94F04C626814276541
SHA-512:	3D6DC082BA6AA51C431D3A40B15C4C3D2ED2B1C807F157A729CE0645070EEF83C6F80BD50540AB99A66ED33B0676C0ACDED249924C688EB01539D8CF4578BFD8
Malicious:	false
Reputation:	low
URL:	https://x.serverbid.com/rtb/i?s=6159&a=e08bbfaa4488c806db75fcbee30dd5ab263321868eb0c8a9f57fc764591ab5e57cf9b8ef1b74af2c&n=217&dnt=0&r=8193693&l=10006764&p=106718&vcid=&dm=custommapposter.com&i2=US&kdn=amx&ksi=2000033&kau=10048&i=e1bda2a5640d30d6&sc=0.6671&dr=54cec92a56a1b81b7103a81e749b472d&dbd=54cec92a56a1b81b7103a81e749b472d&bd=a07226db452caf24&ccc=C6294-7ceeb3dda8217b58eff37bfdd54fb4f7&adt=1&ts=1716283338719&ip=8.46.123.175&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&sbc=3&w=1&adv=airfrance.us
Preview:	..........r.t..Ldd`dh``...?.....3.D...\.............5.#...

Chrome Cache Entry: 366

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58065), with no line terminators
Category:	downloaded
Size (bytes):	58065
Entropy (8bit):	5.867112861048923
Encrypted:	false
SSDEEP:	768:sHjX+aK512qPZSLQadIuq6CIJlB1enJObI2fDjpCA0RgfEvp3mEODV49qkfNxTfL:sHZIEqgLtIEPJpaJ6fHWL4gElaDMq
MD5:	3C0EA4960F3C69BBDE4CD5CD58F49738
SHA1:	8EDEE490976594CE248942277D72B2F5E6F853E7
SHA-256:	5F43A59271CA03094B0EAA318B26A7B8A35517A37862514EE3A324DD4101F8F0
SHA-512:	225EC06DD7F30BA18F8B83CB07D4F01E0AC3B72E50DD1E33A2F4E9C9902C5ADA6E2BD841FD487109FBDA4B33B0F4F34CEB14FDC2F294AEF04BCEE97F654D3690
Malicious:	false
Reputation:	low
URL:	https://static.kueezrtb.com/js/latest.js?_=1716283290225
Preview:	function kzec97o(e,k){var o=kzec97e();return kzec97o=function(C,H){C=C-(-0x1-0x1a7e+0x1bc50x1+-0x34ed);var m=o[C];if(kzec97o['PXPszG']===undefined){var E=function(s){var u='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var T='',A='';for(var h=0x452-0x6+0x4a70x4+0x750,g,U,j=0xb3e+0x1884+-0x2e0xc7;U=s['charAt'](j++);~U&&(g=h%(0x2355+0x37d+0x26ce-0x1)?g(-0x1706+-0x82f+0x10x1f75)+U:U,h++%(0x161f+-0x22c2+0x4f0x29))?T+=String['fromCharCode'](0xf5-0x1c+0xb-0x199+0x2d5e&g>>(-(0x1-0x266d+0x2345-0x1+0x49b4)h&0xb-0x2cb+0x9950x2+0xb95)):-0xe-0x26b+0xe22+-0x2ffc){U=u['indexOf'](U);}for(var f=-0x20x389+-0x120x5+0x320x26,Y=T['length'];f<Y;f++){A+='%'+('00'+T['charCodeAt'](f)['toString'](-0x165d+-0x1696+0x2d03))['slice'](-(-0xf36+0x1-0x150d+0x2445));}return decodeURIComponent(A);};var v=function(u,T){var A=[],h=0x10x15a9+-0x328+-0x1281,g,U='';u=E(u);var f;for(f=0x8dd-0x4+0x3e0x4e+0x1090;f<-0x6e0xe+0x5bb+-0x7-0x2f;f++){A[f]=f;}for(f=0x12-0x9d+-0x64f-0x1+

Chrome Cache Entry: 367

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.080128836461764
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCflM:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr1M
MD5:	36B7ADC1CE41386A8C0CC0D9DE1ECFEB
SHA1:	8339DB830D4037E582F74B8CAE853583BB51BE93
SHA-256:	15ABB59A8E735CB9ED54F4E0D87F8F9B2D0BE399DD5479E07C19FBA4CF7266CA
SHA-512:	F7CE4EF5E1B6F837B56FCB769C36CE6E89C0FC2B57822BE7A61B3A8241B210A6535FD967D4825F25566756FFAEDFF9214774310E46BC2B2BD866322B69DF3215
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"12"})

Chrome Cache Entry: 368

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1217)
Category:	downloaded
Size (bytes):	18365
Entropy (8bit):	4.925560826058072
Encrypted:	false
SSDEEP:	192:QnbtH5nzpr8Xrv66lZL6GP/LYFB8Rz+D43lrylxN8j4Ywzxe2fXH0ja/oNIadNXd:8H5Mrv66DsD431m/JafO+
MD5:	F5CB7C23649D542187B3FBBF2DFD109D
SHA1:	DCF776B560C89A02ACC5F91869DDA369B7BF2CA2
SHA-256:	5904191BCEEFB2EEB3A93B27FAF9C6BE9B3E7980C3E0B8683B76C2A7FAA1BAA8
SHA-512:	F0BFAA1FC4B509B7E615BD2D799AD05E6BD67DEB659FB0D4A090944E92AD666EE11773E9A99C123EB3A88DA9FB2AE778F52FBE49264262C56F9B122119B30D4C
Malicious:	false
Reputation:	low
URL:	https://live.primis.tech/content/video/css/primisslate.css
Preview:	/!. primisslate.* github.com/premasagar/primisslate..//. An extreme CSS reset stylesheet, for normalising the styling of a container element and its children... by Premasagar Rose. dharmafly.com.. license. opensource.org/licenses/mit-license.php.. .. v0.10.1../.. /* == BLANKET RESET RULES == /.. / HTML 4.01 */..primisslate, .primisslate h1, .primisslate h2, .primisslate h3, .primisslate h4, .primisslate h5, .primisslate h6, .primisslate p, .primisslate td, .primisslate dl, .primisslate tr, .primisslate dt, .primisslate ol, .primisslate form, .primisslate select, .primisslate option, .primisslate pre, .primisslate div, .primisslate table, .primisslate th, .primisslate tbody, .primisslate tfoot, .primisslate caption, .primisslate thead, .primisslate ul, .primisslate li, .primisslate address, .primisslate blockquote, .primisslate dd, .primisslate fieldset, .primisslate li, .primisslate iframe, .primisslate strong, .primisslate legend, .primi

Chrome Cache Entry: 369

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.965323240314742
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeO:8DIGoXbfCYKpgrlywuqIQWOeO
MD5:	64054D2F539B89F9F8F392F92AB61E3F
SHA1:	B779E2C1B8EAB8206DF5F4515C60A416C9CD2C18
SHA-256:	CACDE0D17DB53746723C2C56268C14D6CAD7D3B96A9741866C30484AB9ED74CE
SHA-512:	6719E1545789BDAC4F3C4DA4435D1530F265F0C7667B31045F16A88B0DBA15A24A025B5178E9AFCE6FDE1AC70619A4AEEA664219632323BE95424E7FFEA4963D
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Chrome Cache Entry: 370

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.823519045450813
Encrypted:	false
SSDEEP:	3:YxhAHQC4QwbWTpgCNN7kYCiNQDxP4omU4n:YnfuWEkYCiNQtP484n
MD5:	AFC8F5D790000CF329E3CDB6B53DBFDE
SHA1:	D3F96160B7BCB63B1520C91441EADFC436DD6E1A
SHA-256:	A25E1AD5BDC3435FB00B88F292F7938F033A5E6CAEFCD016646A63A04FDDD47F
SHA-512:	2DA79F5191063515577003E3C16597F1D1F7369DB88156AA365146B32DAE165952C2A4860162B5AE7E3B88F19F27BE0B5EA13239D227DB238782AB3B28AF1F61
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=2jqw284&fmt=json
Preview:	{"TDID":"d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-05-21T09:21:31"}

Chrome Cache Entry: 371

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41069)
Category:	downloaded
Size (bytes):	41185
Entropy (8bit):	5.252946240402875
Encrypted:	false
SSDEEP:	768:MnMWFZFzBNzehZ2fVhmCLCmgrwwfM8yyxx35SaJuSfk2WPC6TTWTJSX5Iy/6AZEA:Mn1u0fZOZZRk2W5TVIy/Ax1CLpFkNE19
MD5:	E6C81FEB5D2F00C62904DB946280434F
SHA1:	248BCB84DFD4F77C8B84C9A46E6C27F4A269579A
SHA-256:	968EFC1E46E966F859A7EB9B25E07F1D516F6287D136DFD09362A13919539D15
SHA-512:	BE1C75C675F547C3030ED44BA47760B2A05B9CC267F05ABDCC0F4881BBB8CD9FC084D9BE0947877141564AFF8B133AD7544474767D90F19EAA56DE822F2D61D3
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012405101652000/v0/amp-form-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2405101652000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};function n(t){return new Promise((i=>{i(t())}))}function r(t){return t?Array.prototype.slice.call(t):[]}var{isArray:o}=Array,{hasOwnProperty:c,toString:u}=Object.prototype;function a(t){return"[object Object]"===u.call(t)}function h(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function l(t,i){return c.call(t,i)}function f(t,i,e,s,n,r,o,c,u,a,h){return t}var d="amp:dom-update",m="amp:form-value-change",p="name";function _(t){return(t.ownerDocument\|\|t).defaultView}function b(t){return CSS.escape(t)}function A(t){f(/^[\w-]+$/.test(t))}function P(t,i){return A(i),i=i.toUpperCase(),function(t,e){const s=[];for(let e=t.parentElement;e;e=e.parentElement)e.tagName==i&&s.push(e);return s}(t)}function v(t){var i;null===(i=t.paren

Chrome Cache Entry: 372

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33
Entropy (8bit):	4.55954563450997
Encrypted:	false
SSDEEP:	3:YJH/rWw2NwLSNY:YJ/rWlNOGY
MD5:	29F6865A46B9234B6BBD5308D1325A31
SHA1:	C890304E3DB17BC5943F03E0F3043EC40CD2F303
SHA-256:	1B50F633064782D9010F7DD1C52F648C2507EEAFC591A4A4955C212594AC3AE4
SHA-512:	95B49F756C06C34219F512FF917EDE5DA57D076849B796C444FC964769A8E13E08CF3C6785EAB37E0E80269E133291F238815115144D3D64BD8B624310133D78
Malicious:	false
Reputation:	low
URL:	https://lb.eu-1-id5-sync.com/lb/v1
Preview:	{"lb":"mW53sUj+X9Qf02vYxxhWsw=="}

Chrome Cache Entry: 373

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	152
Entropy (8bit):	4.77093626917207
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KV6EBsXAbBK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqzX+BK3T
MD5:	61CA2D50712129BAB2DA2EADF692620B
SHA1:	9C0E72F89D020B89FD1BE79E379092BF54F41BC6
SHA-256:	6BBBBD632D865BF739CFC4952142C582C2733E5342783A58E2BB23554D9E267F
SHA-512:	1A0796646C1DDF6155DD3B91BE3E93F9D434424A6F073A2D114225046D96F883F9BC9A4886FD56968ACFD2E7FD70A1661BB4A2373B779F9D64061E402CE862E8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /public/hb/bid</pre>.</body>.</html>.

Chrome Cache Entry: 374

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	219
Entropy (8bit):	4.964216548692369
Encrypted:	false
SSDEEP:	6:tI9mc4slicA4nkAHUR3mqZllloEqqqkYj:t4Ix4nkAHkhlllPukc
MD5:	B28071F3B9C4778B36F169BBA3FFDEB1
SHA1:	2E51BC6C662C5E895AA05B9139035B3E4F269D69
SHA-256:	4AF58C04400D32D113FE6384DDC1698AFD9DCF892A1A25970B09E98466582E63
SHA-512:	30CC00BDC153749CC07DD4D7B620B2F33FC9618758CB553D2A87BF99A7A3C0CA4A4A9E53AA4411D3E0E9C4B6E57B1433EAD7BF71C0B93B3C0B1A083A5EDC861B
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/static-res/img/search.svg?id=b28071f3b9c4778b36f1
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="white">. <path stroke-linecap="round" stroke-linejoin="round" stroke-width="3" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z" />.</svg>

Chrome Cache Entry: 375

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	4.606062765233505
Encrypted:	false
SSDEEP:	12:lo/1BxGUWtM/1BxGRdgzWcM/1BxGI3Wk/1BxGGdbWO/1BxGxe3XWF/1BxGherhBN:lo/Ou/cdg6cM/Hmk/V4O/T3GF/2ei+
MD5:	6D0A109CBC6D45F4E64BB4AC6EC1C4E8
SHA1:	6DFE7D8B362698A06CB2CA48EE297B50A6C3C54C
SHA-256:	C51A2D573B4572AF0142694D34B5B3F55F5EB973427C84C25AAC84670858F7BB
SHA-512:	B6451EBF5EF1D903408A63B85F80E9728B4BB33B5A1A1BC16CDDAF3A78507ECE23F2CBB2CAAF7F2BD2B26E819C136904404E55C45EE100B3C8D3AB8EC0ECDC58
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/static-res/img/newsike/manifest.json?id=6d0a109cbc6d45f4e64b
Preview:	{. "name": "newsike",. "icons": [. {. "src": "/img/newsike/android-icon-36x36.png",. "sizes": "36x36",. "type": "image/png",. "density": "0.75". },. {. "src": "/img/newsike/android-icon-48x48.png",. "sizes": "48x48",. "type": "image/png",. "density": "1.0". },. {. "src": "/img/newsike/android-icon-72x72.png",. "sizes": "72x72",. "type": "image/png",. "density": "1.5". },. {. "src": "/img/newsike/android-icon-96x96.png",. "sizes": "96x96",. "type": "image/png",. "density": "2.0". },. {. "src": "/img/newsike/android-icon-144x144.png",. "sizes": "144x144",. "type": "image/png",. "density": "3.0". },. {. "src": "/img/newsike/android-icon-192x192.png",. "sizes": "192x192",. "type": "image/png",. "density": "4.0". }. ].}.

Chrome Cache Entry: 376

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7bde16b5-414f-4c99-b45a-259240a801e0&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 377

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	95268
Entropy (8bit):	5.282555697039335
Encrypted:	false
SSDEEP:	1536:NgsIZI3lDao90l8Rnci+xaHdO/TkukBXrbzldU7LGOKJgH:8mao90lYncRaHx3zldcGlm
MD5:	975872BEEA6FA436507D8A74321584B7
SHA1:	22F1994461D3BF79CFEC0E2CF2D219F8C8B7532A
SHA-256:	6D830A998066B3E15644D716280D1E6BDCEF4DCB2C463DA234743B7ACB8416ED
SHA-512:	4F686F47A05FD2001D7DA0B4008140E4D0056E3B8EC8B06D93C4D0B7365CDE4FA4CB813DA1AD332C0022FC8C60F2C7944009AB5D4986C906B36C7D38A321FEC9
Malicious:	false
Reputation:	low
URL:	https://cdn.id5-sync.com/api/1.0/id5-api.js
Preview:	/*. @id5io/id5-api.js. * @version v1.0.65. * @link https://id5.io/. * @license Apache-2.0. */.!function(){"use strict";function r(t,e){var i,r=Object.keys(t);return Object.getOwnPropertySymbols&&(i=Object.getOwnPropertySymbols(t),e&&(i=i.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),r.push.apply(r,i)),r}function d(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{};e%2?r(Object(i),!0).forEach(function(e){l(t,e,i[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(i)):r(Object(i)).forEach(function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(i,e))})}return t}function c(e,t,i,r,s,n,o){try{var a=e[n](o),c=a.value}catch(e){return void i(e)}a.done?t(c):Promise.resolve(c).then(r,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,i){var r=a.apply(e,o);function s(e){c(r,t,i,s,n,"next",e)}function n(e){c(r,t,i,s,n,"throw",e)}s(void 0)})

Chrome Cache Entry: 378

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=598ce3ddaee8c90
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 379

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	410
Entropy (8bit):	3.735803209797472
Encrypted:	false
SSDEEP:	3:YMVFt+zIJHJjLTayUxaaaaaaaaaaaaaaxaaaaxzfyG3MtE5MJ7UBvMSKBCoaaaa4:YrIHjqyUzz/iJQ9TKBCxr3
MD5:	ADA0B7F6441F7A972B992F032FAA730F
SHA1:	AD07604AE0D0140DC28CA0F778E0EFF38B21855A
SHA-256:	BD361163863D3061F19AFB3FBD48C46AA6E03853C0E0FA45359303467AF4882C
SHA-512:	756507A66D98D8D3D1879B2EA2C6A6F7227A238BC27BB37DFBE2582F13E1068E48256EF59E0091C37482BB25BDB266714051BB976831D98AE3AA1EFE09244AE4
Malicious:	false
Reputation:	low
Preview:	{"/20842576/KJI01M/KJI01M-DDA.B":["html",0,null,null,0,90,728,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNT49Mm1noYDFZEWiwodnSILCQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 380

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HLn:rn
MD5:	B3404176333C3899FED9C32DF4DB499B
SHA1:	943B65FDFB91BB1C1FE81EF87CF74D04F8374EA4
SHA-256:	468E646AF49C955C199D17F8B6CCC61A4D47B7E975160E148892D1E53048C992
SHA-512:	1C4DFEC9C0ED7DA31FC56704C38ACF82EDD798A17818013560FD323F62A70CA6CBA5DF9F101C5FE47287FD004137060962F383EB75B4394A5088392DD1967E69
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnkkPlnkJYb1hIFDQKP-2g=?alt=proto
Preview:	CgkKBw0Cj/toGgA=

Chrome Cache Entry: 381

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=b.r&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 383

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	5.311246673140053
Encrypted:	false
SSDEEP:	24:3AOY7aZw6RVc+u/rAOY7aZwwwy96DGSSf7:QOEaZRVc+ukOEaHN0oD
MD5:	A9A33D98EA8D21AFE643BA2F673AA65F
SHA1:	BFD56D752A02A8A95E0F680FEDD322CBAEDC8C87
SHA-256:	171AD06D195B0098C704A465FEF9E726222A369C1DC39873A7A57AB6E0D74C9D
SHA-512:	F4429FD888E26C0533A91849D8FEDF14F1D1A95DAE17688A3DDC5FE5A8528EB8466EC5A8743CD3EBE907A22A2CBCDC4222F041070AED841EAA13AFFCBCEBA731
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Poppins&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 384

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 385

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3500
Entropy (8bit):	5.03044996987136
Encrypted:	false
SSDEEP:	48:Y8dRXIcRz1R5I2zAytCZCfDaQIJSJEhL3BsqV2OJgmpjYLQU+uKi6JgY:zdRXfZ90yZISTqkrmp8MbCY
MD5:	7B9A57A52A5BE8773716FFAB42BD9877
SHA1:	9C363CA3A4DEF72A599DB5C6BC5048A90A5F3036
SHA-256:	50C998CCBE6C276E386B759AC6FD3EB4E6C7BCA317B8A3673E14723291B80963
SHA-512:	14C5E69CAD3EBF58A0A758350B49ECB4AD25238722A515AD0E07C58F16069D29AAC57448628FD6E5F128772837DEF01E9CA64A3CB23076382108376C76A3C86B
Malicious:	false
Reputation:	low
Preview:	{"id":"752838ea-90b8-4b0c-a424-0727abb0b20b","dbId":"752838ea-90b8-4b0c-a424-0727abb0b20b","name":"Custommapposter","domains":["custommapposter.com"],"domainObjects":[{"domain":"custommapposter.com","isVerified":true}],"googleAnalyticsId":null,"growEnabled":true,"hasPages":true,"deletedAt":null,"siteConfig":{"actionColor":"#4B8DF0","alignment":"right","bookmarkImportCtaEnabled":false,"bookmarkImportCtaDeadline":null,"bookmarkImportCtaImageUrl":null,"avoidSelectors":[],"colorMode":"light","contentSelector":"","copyLinkShare":null,"defaultSearchSelectors":false,"defaultPopupWidgetId":null,"defaultSpotlightWidgetId":"U3Vic2NyaWJlV2lkZ2V0OjJjY2I1NTJmLTY4NjUtNDVjNC04YzdhLWI0YjU5OGEwNjljNA==","defaultMostValuableContentWidgetId":null,"dynamicPageUrls":[],"facebookShare":true,"formDensity":"single","fullPageActionColor":"","fullPageBackgroundColor":"#FFFFFF","fullPageHeaderBackgroundColor":"","fullPageHeaderTextColor":"","fullPageTextColor":"","googleAnalyticsEnabled":false,"growLabs":false,"

Chrome Cache Entry: 386

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 388

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3500
Entropy (8bit):	5.03044996987136
Encrypted:	false
SSDEEP:	48:Y8dRXIcRz1R5I2zAytCZCfDaQIJSJEhL3BsqV2OJgmpjYLQU+uKi6JgY:zdRXfZ90yZISTqkrmp8MbCY
MD5:	7B9A57A52A5BE8773716FFAB42BD9877
SHA1:	9C363CA3A4DEF72A599DB5C6BC5048A90A5F3036
SHA-256:	50C998CCBE6C276E386B759AC6FD3EB4E6C7BCA317B8A3673E14723291B80963
SHA-512:	14C5E69CAD3EBF58A0A758350B49ECB4AD25238722A515AD0E07C58F16069D29AAC57448628FD6E5F128772837DEF01E9CA64A3CB23076382108376C76A3C86B
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/U2l0ZTo3NTI4MzhlYS05MGI4LTRiMGMtYTQyNC0wNzI3YWJiMGIyMGI=/config
Preview:	{"id":"752838ea-90b8-4b0c-a424-0727abb0b20b","dbId":"752838ea-90b8-4b0c-a424-0727abb0b20b","name":"Custommapposter","domains":["custommapposter.com"],"domainObjects":[{"domain":"custommapposter.com","isVerified":true}],"googleAnalyticsId":null,"growEnabled":true,"hasPages":true,"deletedAt":null,"siteConfig":{"actionColor":"#4B8DF0","alignment":"right","bookmarkImportCtaEnabled":false,"bookmarkImportCtaDeadline":null,"bookmarkImportCtaImageUrl":null,"avoidSelectors":[],"colorMode":"light","contentSelector":"","copyLinkShare":null,"defaultSearchSelectors":false,"defaultPopupWidgetId":null,"defaultSpotlightWidgetId":"U3Vic2NyaWJlV2lkZ2V0OjJjY2I1NTJmLTY4NjUtNDVjNC04YzdhLWI0YjU5OGEwNjljNA==","defaultMostValuableContentWidgetId":null,"dynamicPageUrls":[],"facebookShare":true,"formDensity":"single","fullPageActionColor":"","fullPageBackgroundColor":"#FFFFFF","fullPageHeaderBackgroundColor":"","fullPageHeaderTextColor":"","fullPageTextColor":"","googleAnalyticsEnabled":false,"growLabs":false,"

Chrome Cache Entry: 389

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.97177460040716
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoe4n:8DIGoXbfCYKpgrlywuqIQWOe4n
MD5:	16EA81CC65A05B05B549867D16256872
SHA1:	A054E843320C2B0DD2F087395C8E644C484B1590
SHA-256:	8DD2276BC3539358D9A3DFB8EAB4077FEA1861E8B3EF3AF58AA2C3F59FDAE52D
SHA-512:	ED3237D2EC490568C2409E4E77251C4767CCF62127A37D3BAE1A6CF03109365A54D8D616A598663E09F8A2111A4773616B64EE30BDAC4CF09CEF4B7A6C087AE8
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Chrome Cache Entry: 390

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	138
Entropy (8bit):	6.648308695877246
Encrypted:	false
SSDEEP:	3:zsXvOFkoJ21T59AoVntsiBmQWaOybDOkpnHH1bMDwGWaHn:s2Fk/9PtsiBnIybjt2wGWqn
MD5:	F9F804F50AF0313849FC15E576321D8A
SHA1:	449798C51ED8E731E825F2B7E721E5C4A9AE75F2
SHA-256:	4D930FC3AC0FFFB36BCFCE550A6EC4A85F456A388A7847EFB5D61C8BB2E95794
SHA-512:	866DD78FE2EC1CA84DE425E308D01A69C84530995B15CCFC92E54F98E40B1DF71A98D242B5F0AD157798B69482292CBD773719D026660DD9D77DAD206A5E6B7F
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=3056162281704509&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDH.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=8&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342343&lmt=1715994881&adxs=116&adys=864&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=8&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=728x0&msz=728x0&fws=0&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D1%26monu%3D728x90_A1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_600%26auction_id%3D0414a595-af45-46c8-b112-e2c19bab2b8f%26monu_df%3D0.10%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.10%26hb_size%3D728x90%26hb_adid%3D24076e124dc48d5e%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.10%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3636551459&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	....di[.......&np..a`.G..>.l...;..D~$...*.SB[C..4.y.8.K....\|......2.3d.C.Z.+.3@X....]..i.:..s.Yju=&u...A4=......X.}.,...,.D.Z.....#.~..y

Chrome Cache Entry: 392

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	194
Entropy (8bit):	5.0223420036266235
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMr1YSoeVn:8DIGoXbfCYKpEeYlywuq81OeV
MD5:	FD398AB35C2E09F8398863C90AEF7685
SHA1:	10F4259D874AE79FF407599D26E691E384EA6765
SHA-256:	E84C4D2A8997BEA2CA0B71B16F968AB8F0FE01E5C4EFA0C854BCB5270E0CB74D
SHA-512:	25A3C2E40B498995AE044BC666DA3B7C755B61D47679528BF13CB61BB5F2FFF269478A277602737DC2A6140C99D5337D891302CD705976F01914ADC757AAED84
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=17&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"17"})

Chrome Cache Entry: 393

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=112&gdpr=0&gdpr_consent=
Preview:	Not Found

Chrome Cache Entry: 394

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	11660
Entropy (8bit):	7.982382699906724
Encrypted:	false
SSDEEP:	192:aqYjL6nl98n3DY6bIyLik8pHXb8QcTSb8MRAAf+INjKMBlXO1ReMnk5UuX:RYjLHBbIyLTMHLpL9OmjHBl1MY3X
MD5:	AD8E4AD0897DD861FC092253D00D552D
SHA1:	CCA73D697DB92B7F48F10F5E2CF01321382C907D
SHA-256:	3D2811233ADA8CDE19F86DE1AD0D1E2188559C9AE4C90E5E767C8C2269D225D6
SHA-512:	C20620BF2A78754B1C983AD4FEB5B4B275D0F53C86FA8A28C419124D5E4AC0F7F2FB3FC60990CFBFA1DC39DA33FECC74CA51FDFF97A54058CEFC986D1A90415E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=3314276687014682&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=17&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283334937&lmt=1715994881&adxs=791&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=e&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D300x250_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dtrue%26refresh_count%3D1%26lre_rc%3Dtrue_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=434882259&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	...........I=..H]....?B..yO......b.......8..J..uwP..X06..j....rz.&m06Y..y.!.,.?...A"..-.....?.M..n<#.R.."I .d@(.t.......ZR.!.].D..<r.....C...i..i:.jr.s...}...U....S..7..3C...T6...z..]4"j4....$8...X.....!.=hm...j....5J....P..u3?.........`.......ru...y.t\|\|a...x.....a..a....a....Z.~lb..]g...N..{.)Y...s..;s.p....c.......Z.!3.....%.s...ip.Eypt.W..#.......?........0p.v<...O0..Z...~'....N6..'I........G....)..u.M Q.TmA q....J.T............5_..49.....j...".K..P'5.F...@..9...(Q4..._Ezn...fI.j@G...?+h.m G.9.O.f.zi.x7[.....W...R.(..%....R.v.qn..`(.i...>a.P.M..m...rD... }.B$....s..i#...Le.=.L9c.u.M.FCJ-.jZ.....F..0..t4.=A<p.7......]h.{.VY...t.EQ3ty.....,D.....sV.....T...#..~;.d\..C..........;..........o..b...,..\V.p.0Ed.....-...XE)J>)."...K..l.&..Q.K...E.1F..!J..$.+y;.z...S.EnF/0_.x..K,..z...0A..c......F."..U.6K\|....J.{...[..:...k..Z...m.0.s0.R...;5...`......lO~^.....iw..Gz.5.....V...!.Fn.).,..t{.k..2hq.4..$.. .@.h9.i..C...&..c..

Chrome Cache Entry: 395

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	5.102589855744282
Encrypted:	false
SSDEEP:	12:2JqxHgCBKm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2JPdfm8uVCxwgxkHEZ1VZflok
MD5:	076AC966A611F7EDE712EBDD69346B1C
SHA1:	EA50324A67AD11A97BD45D1E7DD1EBED98AC0DC7
SHA-256:	7C3E5D61981611F96A8D19F8BC87BE2859331F62234D4F7D1368690E36140B0A
SHA-512:	6A97540CC48652CFBF707C51759CDB00D081E02F1315B12A9C6D550B293155092A8748C199361DC86A011525D4707AD3C95E43C54D56A4602445DD0E122306F5
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/76b6d1d8-9f58-4ac7-a92e-f3232afccc8a
Preview:	(function () {try {const accountId = "76b6d1d8-9f58-4ac7-a92e-f3232afccc8a";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 396

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 397

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	882
Entropy (8bit):	5.52031779149715
Encrypted:	false
SSDEEP:	12:kxP52o2s3AbTWOX8GrhM/oEfCYKqBUO+EPbFqH7BoVNmiWa+sUZDG3q2Tqk:k3fxGNM1KqBbUilZ
MD5:	BD646451E3BB0A583B957A786410E8A7
SHA1:	DB9784C745D56DE5C1C8F9303E73E14D7B85E32E
SHA-256:	0742E686A1F7E356A4A4DC777A9A122F07D107FFE6612566BABEB62162F73785
SHA-512:	FCA50092EA2BD61C8A83FFB5AEC762994273B4A0DB74454F2E578829AB65ACB92EAE7711B5882D95402837EE746103B94EC3CB809FE234373458044B1E31D968
Malicious:	false
Reputation:	low
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=22&gdpr=0&gdpr_consent=
Preview:	<html><head></head><body><img src="//visitor.omnitagjs.com/visitor/sync?uid=9276a8c8d010b77af50144c60047b781&visitor=5439263188312224104&name=SMARTADSERVER&gdpr=0&gdpr_consent=" />.<img src="https://dsp.adfarm1.adition.com/cookie/?ssp=5&gdpr=0&gdpr_consent=" />.<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent=" />.<img src="https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=" />.<img src="https://cs.admanmedia.com/e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D130%26partneruserid%3D%5BUID%5D%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BGDPR_CONSENT%5D&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 398

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.0771691528876195
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYPqQyKonv:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr1Z
MD5:	229A252CFDE3EF7283E594B7D3909F11
SHA1:	39B14B4CF6A843BABF3A7B483F26299D44E1BBFA
SHA-256:	A21DFB73EA54775EBB56761C6CA440579C51A53A6422D834794302FB5C16A0EF
SHA-512:	088BA234E051C24F6C02C2AA0D69A03703FFD318C550C3B8C4A905D94C44B56EEC91C46FCDAACA6CAF51302C2B549226C3634672A9963D6027C365F89D809ED5
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=19&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"19"})

Chrome Cache Entry: 399

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.004637207804431
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoe5:8DIGoXbfCYKpEeYlywuqIQWOe5
MD5:	644FEBDFB5076D34CC6BC7CA0A60C6D7
SHA1:	719D0969F1AE698E508A9D9958142BAA9DD0A1F3
SHA-256:	FAB1EE787A2CC99A22D77009C5540A78C2E1C51749EBBE3A5FDA54A7023FDFEA
SHA-512:	ACBC9791D8C086C59CE20E351570F6785325E41EA7BE7F97A0A53EAD4A88D984FAAF03AF0B1574A27450E935706590F993180E6A5A6C24E823CF0BED79D0891E
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=13&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"13"})

Chrome Cache Entry: 400

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 401

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 412
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	7.207300446106644
Encrypted:	false
SSDEEP:	6:XtdXkxq2hn4B/sm04FMa1c+m2kvl28ptL+Z4wTOwMw4meYZ4kAK:XPXx2hK/2NaiB2M7wHMcec4hK
MD5:	348916AD0D03CF3088D9F6F41C91BABE
SHA1:	1F497D34413C38D65304832EA884A0DF5F906E67
SHA-256:	DED03796CCA93C245B75F5D7CBE621709CD66CB38B1BCFF0E201AFE627E2EF24
SHA-512:	DC1CE2E582D1BB588B9B6C7E0C9CA67A99689D1B1BF61B4F805FF71909F9ADB1D72DB3F11BC7A89BB1FE74CDC3F01E6F4942D5F1B10F9E38DE87CD465507E0A1
Malicious:	false
Reputation:	low
URL:	https://u.kueezrtb.com/fpd?_=1716283326048&yv=35705d2&h=custommapposter.com
Preview:	..........<..n.0.......4.."S.R...MrA.H\...'....FU.;;....C.N.........u.+..y...~(...1..L.'..!.>B.....i." ...(..i.....+.......V..7......XrT.X....J.w'@.. ;.....0.6OD..A..^...g.E....{s.{.^\......L8.......2}.o.P%.........3...a.......\..*]...,...i.....g.;0q.Z...-6.......d....Q.gP.{.....w.3....g.K...3.@..~.........K....

Chrome Cache Entry: 402

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	201
Entropy (8bit):	5.010831797345906
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoeU:8DIGoXbfCYKpEeYlywuqIQWOeU
MD5:	4D497F07CB9AB8B694F75C1C3FB64D3D
SHA1:	6ACA6C7AFA2E5B3CD35302147B3C518ECB550B52
SHA-256:	1FAE2C6A1184A651D3DBBF1C9898C740734C47A52B035779AB29C17368F10542
SHA-512:	497AF2BDFE7F8E1C7708BFA939EE8A4808C01F0524426ED27A56332861930DDC830E8D45551CCF71F54CA7D836126A8E6E15D3EF94E183A840D9A438FBE14CE4
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"10"})

Chrome Cache Entry: 403

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10412)
Category:	downloaded
Size (bytes):	290979
Entropy (8bit):	5.601227895444036
Encrypted:	false
SSDEEP:	6144:fA3b5PeuR9DE/B8OrAefXm4D1muZkX/a2kp6Ili1rdd+aT2f4Fc1cSkIHpuSApes:qb5HR9DZ1p+QYBtEf
MD5:	CAB9E4E5436433A552EF088861C783A2
SHA1:	7C77065A6DE9ADF3C0E20381A39C7650EDFD15CD
SHA-256:	70B914DE15DD75628895223BFE09012E3687598BCA4DBAA34A97234F6A8826E9
SHA-512:	2F15D1BD2CC2B3C9A91A0BCA62C5D77515CE11E50BF83A24C9128C987A0E6D704D1E0C4ADF8FD82E1DA3FDD5B21E02278313B5B5BC1082695C016CD11D068D9D
Malicious:	false
Reputation:	low
URL:	https://cdn.confiant-integrations.net/gptprebidnative/202403121239/wrap.js
Preview:	/* eslint-disable spaced-comment /.(function() {. 'Copyright . 2013-2024 Confiant Inc. All rights reserved.';. 'v3.202403121239';. var confiantCommon = (function (exports) {. 'use strict';.. (function(_0x3ac78b,_0x49b52c){var _0x80bbe2=_0x3ffa,_0x12cb31=_0x3ac78b();while(!![]){try{var _0x5934b6=-parseInt(_0x80bbe2(0xa9))/0x1+-parseInt(_0x80bbe2(0xb4))/0x2+parseInt(_0x80bbe2(0xbc))/0x3(-parseInt(_0x80bbe2(0xa2))/0x4)+-parseInt(_0x80bbe2(0xb6))/0x5(parseInt(_0x80bbe2(0xa3))/0x6)+parseInt(_0x80bbe2(0xad))/0x7(-parseInt(_0x80bbe2(0xb7))/0x8)+parseInt(_0x80bbe2(0xab))/0x9*(-parseInt(_0x80bbe2(0xc0))/0xa)+parseInt(_0x80bbe2(0xb1))/0xb;if(_0x5934b6===_0x49b52c)break;else _0x12cb31['push'](_0x12cb31['shift']());}catch(_0x365065){_0x12cb31['push'](_0x12cb31['shift']());}}}(_0x190b,0x194d1));function confiantTryToGetConfig(_0x248678){var _0x4d147e=_0x3ffa;function _0x697215(_0x1218f8,_0x45ed35){return !!(_0x1218f8&&_0x45ed35&&_0x1218f8[_0x45ed35]);}function _0x584bfa(){var _0x395f7

Chrome Cache Entry: 405

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvWRKNKijrpqwR_G8u4QkGwykt4fOurkN-pnsz_fAlrM2vyHYRSWOj2R0OUFBd62kq4FcXkIL9z3qIp-t69Sr_g239f1ZLC7aAOKN5jF4K6LQvSR1JMSPu3bfaXTV8Hjm1DFma_1iO2ZZGVoFOPExZaq0ng5rHmgTixBRjwOg&sig=Cg0ArKJSzB4gtkaGF3BjEAE&id=lidartos&mcvt=235&p=817,267,907,995&mtos=235,235,235,235,235&tos=1004,0,0,0,0&v=20240520&bin=7&avms=nio&bs=1263,907&mc=1&vu=1&app=0&itpl=19&adk=313124495&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=3&r=b&co=1221611000&rst=1716283304955&rpt=11627&isd=0&lsd=0&ec=1&met=ce&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 406

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 407

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 408

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=p.f.i&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Farticle%2Ftop%2F926%22%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 409

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.97177460040716
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoenM:8DIGoXbfCYKpgrlywuqIQWOeM
MD5:	64F8E13218319CA6A9A5CFF567D5E339
SHA1:	24697A44FFFE9ACB1FEC0601B22FCCC2C1A2CBC5
SHA-256:	74332A01755365C1B86AFCD5273F59CC9FCB374660075C5EAD8AE09B7A226B9E
SHA-512:	A4D0A8AD415877DDD09C422D264FBE0D9F944761CA521DCC6CBEDA926DCFC9CC592D210A13F6EEB81F1BFD70B493D08240C0AE38D5735B75738F17E1809A22CF
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=1&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 410

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 411

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 412

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	4.9971848342210725
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKo2:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeO
MD5:	CF5E7E792CF809593FA7E185285D447A
SHA1:	CCD0523140FBD80C0E611CAD9B958F2C97F1F67E
SHA-256:	2CCAB914AD9DA56F6CD602E44947518499FBD5E97EEE9E5A4A29B64C851AA694
SHA-512:	D1A715A72398C986A7EA4CCED2ABBE61E99D7B4188FDC45E8AB20518B0174E150BAD9184A593D5FE453D7E9C28180A784239041E23375A3574FAF91B476C846D
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&pid=nuvrykVNik5mU&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Chrome Cache Entry: 413

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (302)
Category:	downloaded
Size (bytes):	5020
Entropy (8bit):	5.462714794238582
Encrypted:	false
SSDEEP:	96:79Zui3EZipZN2KUn7NsfYWo0y+kfFbtemfFWFj6ZfmUIAf1ckefPsbmv6ofTP0EK:790i3EZip7Zm7dD0yD5lijtxRsb5mTPO
MD5:	E38BB0A0FE3342DBE3B05144C01DDD70
SHA1:	BA10586D6F00D7C60A4F97B0452D638E81D2E22E
SHA-256:	C9A3D98C56275C97183218A9DC18D2AA02175FAB96B2D9CAA7DFEF3F50369340
SHA-512:	D0F6E2A894666521D43D6170480D450B0E582CB433D3E34A1CEC181C596EFAEBB864C2DB9852E41F0D0D86C5132E31EF6E316FA1F477822C137B3FBFE6AD1C84
Malicious:	false
Reputation:	low
URL:	https://sync.serverbid.com/ss/2000033.html
Preview:	<html>.<body>.<script>.(function() {. var DAYS = 24 * 60 * 60 * 1000;. var SYNC_COOKIE_TTL = 0.75 * DAYS;. var SYNC_COOKIE = 'sb_ss';. var SCRIPT_VERSION = "31";.. var u = (new URL(document.location)).searchParams;. var gdpr = u.get("gdpr") ?? '';. var gdprcs = u.get("gdpr_consent") ?? '';. var usp = u.get("us_privacy") ?? '';. var gpp = u.get("gpp") ?? '';. var gppsid = u.get("gpp_sid") ?? '';. . function createPixel(src,gdpr,gdprcs,usp,gpp,gppsid) {. var p = document.createElement('img');. p.setAttribute("height", "0px");. p.setAttribute("width", "0px");. p.setAttribute("border", "0");. p.setAttribute("style", "position:absolute;");. p.onerror = function() {. this.style.display = "none";. };. p.setAttribute("src", src.replace('${GDPR}',gdpr).replace('${GDPR_CS}',gdprcs).replace('${US_PRIVACY}',usp).replace('${GPP}',gpp).replace('${GPP_SID}',gppsid));. document.body.appendChild(p);. }..

Chrome Cache Entry: 414

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7374
Entropy (8bit):	3.7087999020258615
Encrypted:	false
SSDEEP:	192:1w1xe9KNd07c0Zsg2/ZX0dRzVO0Zfv4emqb9Z+siAtz6oyQg/S:uc9y07/Zsge0dRzzZYebb9Z+sh9yQp
MD5:	795242580BFA3135028BD0750FDC1654
SHA1:	2C344B6662E62DDBDBA49F635E1C33A827FE75D4
SHA-256:	DEEEE170C3759A6ED35C0C05C5B935D0E7638F1C0C5677166918ECFF6EDB1909
SHA-512:	09CF57EA5F0FC9778DCE5578718E2B2DB960D145BEC1AFCE58B6BA0B1670FF4E31B91B3CB69EAB0004E72E193B4D0F374A13F5C8D96A79902A96F5C72A65054D
Malicious:	false
Reputation:	low
Preview:	<svg width="152" height="24" viewBox="0 0 152 24" xmlns="http://www.w3.org/2000/svg"><title>SwissPass_Wortmarke</title><g fill="#FFF" fill-rule="evenodd"><path d="M2.75 18.86a4.87 4.87 0 0 0 1.59 1.9 6.66 6.66 0 0 0 2.4 1 13.64 13.64 0 0 0 3 .31 8.36 8.36 0 0 0 2-.26 6.86 6.86 0 0 0 2-.82 5.05 5.05 0 0 0 1.53-1.45 3.69 3.69 0 0 0 .61-2.14 3.12 3.12 0 0 0-.44-1.67 4 4 0 0 0-1.13-1.19 6.62 6.62 0 0 0-1.53-.79 14.77 14.77 0 0 0-1.64-.5L5.93 12A15.13 15.13 0 0 1 4 11.36a5.56 5.56 0 0 1-1.66-1 4.83 4.83 0 0 1-1.15-1.61 5.4 5.4 0 0 1-.44-2.28 7.31 7.31 0 0 1 .32-2 5.42 5.42 0 0 1 1.21-2.09A7 7 0 0 1 4.71.69a9.72 9.72 0 0 1 4-.69 11.52 11.52 0 0 1 3.25.45 8 8 0 0 1 2.7 1.35A6.7 6.7 0 0 1 16.47 4a6.67 6.67 0 0 1 .69 3.11H15a5.36 5.36 0 0 0-.6-2.3A5.19 5.19 0 0 0 13 3.2a6.1 6.1 0 0 0-2-1 8 8 0 0 0-2.3-.33 9.54 9.54 0 0 0-2.17.24 5.42 5.42 0 0 0-1.83.77 4 4 0 0 0-1.27 1.4 4.4 4.4 0 0 0-.48 2.16c-.013.48.08.958.27 1.4a3 3 0 0 0 .76 1 4 4 0 0 0 1.11.68 8.28 8.28 0 0 0 1.34.42L12 11.33a16.5 16.5 0

Chrome Cache Entry: 415

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeoM:8DIGoXbfCYKpgrlywuqIQWOeoM
MD5:	4729D992780A2C16CEDD377037B32FA3
SHA1:	F84DF5BB801F10ABD274F2DF1CD9CEEF3C96AF12
SHA-256:	F6E97791F8DCDB867599FD951909CA761D7EE18F33AA35D71818AAF58D84BA1E
SHA-512:	259504FF963D4F93AFB79A58F05453E3212BD01C2D08FE60231EBE43E29E8D60D3B47C46DC54590837A86E72B9F87F8BFEA0AFE31808A087972C77BF51F89671
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 416

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?dtstmp=1716283324432&did=did-004d&se=e30&duid=15efe6ffc406--01hyd7acptahsywd92p39kvw1k&tv=v2.14.3&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ext__pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&wpn=lc-bundle&cd=.custommapposter.com&c=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-PGgxIGNsYXNzPSJlbnRyeS10aXRsZSBtYi01IHRleHQtY2VudGVyIGZvbnQtc2VtaWJvbGQgdGV4dC0yeGwgeGw6dGV4dC00eGwgIWxlYWRpbmctY29tbW9uIj4KICAgICAgICAgICAgICAgICAgICAgICAgMTAgQmVzdCBDcnlwdG8gTWluaW5nIEFwcHMgZm9yIGlQaG9uZSBhbmQgaVBhZCAoMjAyNCkKICAgICAgICAgICAgICAgICAgICA8L2gxPg
Preview:	{"bakers":[]}

Chrome Cache Entry: 417

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4380
Entropy (8bit):	5.119100671786983
Encrypted:	false
SSDEEP:	96:vorpM8TdSnMozgEl6tBbXYWm47xmMCu39fJfdRaK4KqK7rK4mJscVFH46Bk7nu1Q:vt8RnMADMMd39R3adxoBm44k7nuC
MD5:	5EC67BF6C2F2EA2C2A951F7B6C75EB01
SHA1:	16047CE61A4D8F2F4C8859F7DFD06C50EC9B63D9
SHA-256:	2E6C68566A72403F6BA23BFBE055AECCA415FC0456D805CB41B2354AD79BCFD2
SHA-512:	33E51DC99AF1F826C70C6C73F0460E7413C9ADD5DA96C9C6C3B26A96D57C8C9830BA9773E450F5677292AC4300F94B42700D09ACC912D9B175E3963523F511CF
Malicious:	false
Reputation:	low
URL:	https://www.swisspass.ch/env.js?v=1715295378
Preview:	(function (window) {. window.__env = window.__env \|\| {};.. window.__env={. ASSETS_DEPLOY_PATH: 'https://d27la2n6wh4qws.cloudfront.net/1.11.276/',. SITE_BASE_URL: 'https://www.swisspass.ch',. LOGIN_BASE_URL: 'https://login.swisspass.ch',. LOGIN_PATH: '/v3/oevlogin',. API_BASE_PATH: {. BENUTZER: '/api/benutzer/v2',. LEISTUNG: '/api/leistungen/v7',. PLUS: '/api/plus/v2',. PROVIDER: '/api/provider/v1',. IDNOW: '/api/idnow/v1'. },. AIRLOCK: {. BASE_URL: 'https://login.swisspass.ch/',. LOGIN_API_BASE_PATH: 'login-api/rest'. },. OAUTH2: {. ISSUER: 'https://login.swisspass.ch/v3/oev-oauth/rest/oauth2/authorization-servers',. LOGOUT_URL: 'https://login.swisspass.ch/v3/oevlogin/logout',. REDIRECT_URL: 'https://www.swisspass.ch/oauth2/callback',. CLIENT_ID: 'swisspass_ch',. SCOPE: 'openid customer ACR_Level_10 ACR_Level_20 ACR_Level_30',. REQUIRE_HTTPS: 'false',. },. disabled: {. routerTracing

Chrome Cache Entry: 418

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.060579965992869
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCf5:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr1X
MD5:	C1B598E84B1B23963848CE67F2AA5585
SHA1:	6B3DA007B0E0046710060BC87DE579D1EBBAA11A
SHA-256:	A84E9C1BFC75EFCBC3B7525F0C15D5E14BDED9BE155A99F275DE9FA460A55748
SHA-512:	335A2863D2958D3843382666F06A4C94E2FBF398F2DFAA28B268BD4F4861E7AEC44EF2F39D1C01561DE8935B1C151619AB9DD33A65D210A715E7A5064963C8F2
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"13"})

Chrome Cache Entry: 419

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://x.serverbid.com/usersync?ttt=1&src=2&cspi=0&cn=4&spui=&dpui=IsTyALZHNuVjvTOGTxWA7BW5
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 421

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeD:8DIGoXbfCYKpgrlywuqIQWOeD
MD5:	22EA7455FC49776D3885D9752E410753
SHA1:	995E4F7BDD68E559C6B9B8FBF468BE324746FC7B
SHA-256:	340D1C34DDCB9798A757805C393CEBC14103F6F6B26D3B5E847FEA536F7F1DEB
SHA-512:	C28FE7B4D372CA3A258DB7623B0C9F94520DD0816702EAC5BBFA6A36571ABCA2EA2D66102BDCADD0FCF736E5FD8508FF6FB2A5FD46B2909FC967047CD787872C
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Chrome Cache Entry: 422

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 423

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7660f095-8567-4e13-b266-ede79c1f7a19
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 424

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24797)
Category:	downloaded
Size (bytes):	41331
Entropy (8bit):	5.38180189774426
Encrypted:	false
SSDEEP:	768:gf8/g/Nl/s/s+s1Rfo0B2FwYLWdYKriRzCsvFvCuQ:gfUoNl0s00fLrDuCuQ
MD5:	D2F0A3E43C6A222369CF67CADEAF1955
SHA1:	A324CB190EAB49AF9DBEA0077B3F2074D8889CB4
SHA-256:	636A7FFE73C1F11B9AD6CFF881BA80975977A42D84CD7D9AA19207192D0FC3D5
SHA-512:	B59CAAF3C52551E22DA3EC13EDA64C4D7043C8883FE102C4B949000D168E35870133AD78B8362E8C3E0B0A8BF13F70B6A16FEF0490FEE257E368C0957F8AABE5
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-05-15 00:30:00 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":0,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1",

Chrome Cache Entry: 426

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.737411517255149
Encrypted:	false
SSDEEP:	3:YxhAHQC4QwbWTpgCNNpAcANQDxP9YmX4n:YnfuWWAcANQtPGn
MD5:	E2A835648E461B5A5D4751419F2B9494
SHA1:	0B44636D4C3CB439B46CE860A8ACA04EE3189CF2
SHA-256:	856E48000DFBFA19689EE454F144EBB736F1BC32090564DEF19F605968B31EF2
SHA-512:	6BF446A890EE3709E94C82C3C220DBF011E6ADD7D808F6BF4CEA0D30A8B961AE52E6397BEAB8F2741076DD4488247BC17D8592C48E2EA786D4A57AA49CB9841A
Malicious:	false
Reputation:	low
Preview:	{"TDID":"d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-04-21T09:21:32"}

Chrome Cache Entry: 427

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24576)
Category:	downloaded
Size (bytes):	27419
Entropy (8bit):	5.310815475178866
Encrypted:	false
SSDEEP:	768:Z//LKoMtCGsOUdfz4wDQjZvy/KQWwY4RXrqt:ZXG5tCGYxDQjZK/KQWwY4RXrU
MD5:	30591A69EBA960C1B33596DE017BBC2B
SHA1:	24DCA9879ABFE2E937DE3E5550C0A44E34317E89
SHA-256:	FAEB9082E0F57354B3655ED61C286CA1A78E315B465C1D69CC7DB20D01A5676D
SHA-512:	79D70E76CF84763F0C19903B2B1C2D48FF5BBE96B4FB2C8E5D026812C6BABB94A71FF1737B1BA1558073B814D549E2765CFFC8F150C5E27194F1CAE2EE822861
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid=77&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","lookup":{"g":{"name":"g","time":14,"cookie":"data-g","urls":[{"type":"img","url":"https:\/\/cm.g.doubleclick.net\/pixel?cs=8&google_nid=media&google_cm=1&google_hm=<encb64vsid>&google_sc=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}","eu_url":null}],"pvid":77,"isBl":0,"g":1,"cocs":0}},"ussyncmap":{"disable":{"crt":["IN"]}},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd","yie","mgt","tst","ats","pts","mdn","mts","trs"],"bSize":2,"time":30000,"ngGroups":[]},"lo

Chrome Cache Entry: 428

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKof:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeX
MD5:	D77C176FB63BB863F4E64FF0455C7A57
SHA1:	E9BCC0DCF53EA20D1BBFC0F404C722248A8A170F
SHA-256:	B84716F9879584BCE46488B8FDDC4BC73E1B25E0C7401061C2A0B864C6F45165
SHA-512:	A26A77D69F7E6D3743CC90EA7E1177E26B5550C2DDF7D4B1DB38E588308E2BB38D49EB9F9935EA63FB10765898486B6E6AB9F1F57192EEE97E98AEF37725E7BA
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&pid=nuvrykVNik5mU&cb=0&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 429

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 430

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKoZ:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeR
MD5:	6FD9C634402A2F873ABF30EEDA6AE49C
SHA1:	13650DF88E9B10EA5A0A68DEDEB7338097F18EB7
SHA-256:	94587207DDB580C65ED8402E3C9E87DB831D365C92A382534EC7FBFB7E98DEED
SHA-512:	CB37BB7B8E966C2658DE01915FBCD77A6548A002FE0A5AC80D7FF9E89D7A6E4D02F7CC67E39B08182A59973817CC987B983A4055B678A66036EAEDDFF83F2A83
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 431

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	411
Entropy (8bit):	3.7395413485923843
Encrypted:	false
SSDEEP:	3:YMVFt+KpJHJjLTDobNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5MJeEX81il6aaaaaaF:YKHjzozz/iJFDyr3
MD5:	8C21B7951D7A521DC966A210BA9A1286
SHA1:	D75E39D18BC5AC6208B6675FE583238A8725F02F
SHA-256:	A5318E36EB743EFEDFECF00BA3B17E3F6C02D5644A1CF93D051316544C6A7E33
SHA-512:	816DC44EFD9D72F30D766C9B233375CA1F7F15972F27D3087D3FCD94DD52F7A6525F6FD5DA8CD8CAE03E72C29564AA864855B8C8BBF807C4214F4A1B0C4F6685
Malicious:	false
Reputation:	low
Preview:	{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CM36mMy1noYDFV2fgwcdRxoJWw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"9",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 432

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539)
Category:	downloaded
Size (bytes):	2791
Entropy (8bit):	5.287322045927613
Encrypted:	false
SSDEEP:	48:bL4kJCci4a9kJlBArKGCTCUn8b1wyWmKV7CSiaH1wyWqk/1wyKbS1w1ivEgvHO1E:n4Ci4acaK52U8WyWmKVunyW36yKbF1iJ
MD5:	5C7D501A421E8374AEA0ED48A56FCBB0
SHA1:	6D3E76AF7ACA71F56F36D587C040E1B9EBC42892
SHA-256:	44CE81F335EF7BF6DE6077CF455BA3246E3C6296C341569078483632DB25F096
SHA-512:	BD4417BE5B755D5768BC3CFF88F4F78488274CAB93E5EFF8DBD776A4120440143D7C8EBF9C122E08E08A564F4B51AC7EBC6B48233EC97369770782FA7B67C1C3
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/usync/iqusync-1.29.min.js
Preview:	var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(d){var f=0;return function(){return f<d.length?{done:!1,value:d[f++]}:{done:!0}}};$jscomp.arrayIterator=function(d){return{next:$jscomp.arrayIteratorImpl(d)}};$jscomp.makeIterator=function(d){var f="undefined"!=typeof Symbol&&Symbol.iterator&&d[Symbol.iterator];if(f)return f.call(d);if("number"==typeof d.length)return $jscomp.arrayIterator(d);throw Error(String(d)+" is not an iterable or ArrayLike");};.function getIfbip(){try{return Number(document.currentScript.getAttribute("data-ifbip"))}catch(d){}}.(function(){function d(){var a=document.createElement("script");a.async=!0;a.type="text/javascript";a.src="https://cdn-ima.33across.com/ima.js";a.onload=function(){(new _33AcrossIdMappingsProvider({pid:"0015a0000344WLkAAM",expires:90,refreshInSeconds:28800})).fetch().then(function(b){Array.isArray(b)&&b.length&&(b=JSON.stringify(b),e.il_ls.lexc_33=b,localStorage.setItem("lexc_33",b))})};var c=document.getElementsB

Chrome Cache Entry: 433

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 437

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4676)
Category:	downloaded
Size (bytes):	4677
Entropy (8bit):	5.396239325211645
Encrypted:	false
SSDEEP:	96:op5jm8rSBjm4uRjmwCujm9rxWjmMrTjm9rGIk2jm9rGLjmQrZjmzrLjmzrq5jm8z:M5jmmyjmDRjmwnjmhQjmWTjmhGL2jmh/
MD5:	6B574E57E4BC156576C75C96A9B47535
SHA1:	4C5639218DBAA928570BA51B7171BF579F0CB86C
SHA-256:	03ADF0434E66FA0E1D58ED30E0B6E878C6AF1132834DE2281716FF68B62B875D
SHA-512:	4AF33362F3D9D8AAA19E702603B175F86C4BB5202FC3B7F5BEDFFF43E22A074D0FD31203C7AAEB49C6BA6A2B6D5389B1F73C541098105F8DEFC98B67D7221E3A
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/sync/iframe/?cid=65b2119efa63bcb4a70d58bb&gdpr=0&gdpr_consent=&us_privacy=
Preview:	<html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%5BUID%5D" width="1px" height="1px" style="display: none" />','<img src="https://match.sharethrough.com/universal/v1?supply_id=SzhEXqCN&gdpr=0&gdpr_consent=&us_privacy=" width="1px" height="1px" style="display: none" />','<img src="https://ssp.disqus.com/redirectuser?partner=kueez-zeta&gdpr=0&us_privacy=&gdpr_consent=&r=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-zeta%26partner%3DKueez_Entertainment%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D{user.usPrivacy}%26userId%3D%24UID" width="1px" height="1px" style="display: none" />','<img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-xandr%26

Chrome Cache Entry: 438

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=b.r&u=7660f095-8567-4e13-b266-ede79c1f7a19&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 439

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeN:8DIGoXbfCYKpgrlywuqIQWOeN
MD5:	B6D678DFB7FD7C7AD1E0CC8B60AFFACE
SHA1:	ECF11A8EAAE7629DC92D817BEABBED9BF365C6AF
SHA-256:	F58C6FD2AEB9834765BD5CC74B09E9A062BD201D84031B7C5BBB0B0C9D98EF9A
SHA-512:	1D4D0C23CB1DDA6D2E116828E0EAAD8A07E81F9F9A45A6AF228CF4246F9111FAA278CB7D7F80040740698F03E240F210EFA0C2D6FAE09601F4EC68D2B1D7F436
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=6&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"6"})

Chrome Cache Entry: 440

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1183
Entropy (8bit):	5.3080799003641665
Encrypted:	false
SSDEEP:	24:YsrMjMjDtU2Hjjz58uJGdVg+VBGdltdlDsu1AeeW81e8fUQdiaVqY:YsoUDu2/9NGde+VYd9lDZAC8PfUKiuqY
MD5:	76B9FBB76B8F5CA1D0F05C01361039B6
SHA1:	A4FFEEEADE966CDDD21B215DBB2CA78426042300
SHA-256:	A2ACB78F4EBCAD0F71FBBFFFF5CB7F8DB068726D90923A1CDF5CCE1ACF592598
SHA-512:	8D55EADFC01A7CFA8FE59F6967C8022E9EDE3B2D78E166D21057DBFE49EF612B317A75197D748146B982E974B9B3ABD7B4FB269F1FBAEC1E3D842EE442A16E54
Malicious:	false
Reputation:	low
Preview:	{"3pvendor":"var blockthroughPropertyId = 'AAX8RN661';\nif (!window.__bt_already_invoked && blockthroughPropertyId && blockthroughPropertyId.charAt(0) !== '%') {\n createScript('https://btloader.com/tag?aax_id='+ blockthroughPropertyId + '&upapi=true');\n}\n\nfunction createScript(url){\n var blockthroughScript = document.createElement('script');\n blockthroughScript.type = 'text/javascript';\n blockthroughScript.src = url;\n document.head.appendChild(blockthroughScript);\n};(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;var id5PropertyId = '1013';\nif (id5PropertyId && id5PropertyId.charAt(0) !== '%') {\n var id5Script = document.createElement('script');\n id5Script.src = '//cdn.id5-sync.com/api/1.0/id5-api.js';\n id5Script['onload'] = function (e) {\n ID5.init({ partnerId: Number(id5PropertyId), provider: 'aps' })\n };\n document.head.appendChild(id5Script);\n}","3pmetadata":"[{\"propertyId\":\"AAX8RN661\",\"vendorId\":\"acceptableAdsExchange\"

Chrome Cache Entry: 441

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeoM:8DIGoXbfCYKpgrlywuqIQWOeoM
MD5:	4729D992780A2C16CEDD377037B32FA3
SHA1:	F84DF5BB801F10ABD274F2DF1CD9CEEF3C96AF12
SHA-256:	F6E97791F8DCDB867599FD951909CA761D7EE18F33AA35D71818AAF58D84BA1E
SHA-512:	259504FF963D4F93AFB79A58F05453E3212BD01C2D08FE60231EBE43E29E8D60D3B47C46DC54590837A86E72B9F87F8BFEA0AFE31808A087972C77BF51F89671
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 442

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1354), with no line terminators
Category:	downloaded
Size (bytes):	1354
Entropy (8bit):	5.222881336013067
Encrypted:	false
SSDEEP:	24:Y+KVPqQJ1Uud14Q1UZNsuHkZOi+li4lFi+Mx154V9t4Gub6ASqi9acjW89l1RWZx:O5qQJpGQGZN9ZJFyDFGub6qaasWs1wH
MD5:	905005627335D37AE2E76B8D0B10C93F
SHA1:	9B0C8705681FB3AA1060858926C58CFD7DECA6E0
SHA-256:	9BF25AEA69DAA145CE93781ACDB639F50218CC707E43D0735A014F234AF147CC
SHA-512:	F65BD6A75F4BFBF259765108490E05E40E00C0E046165883680BE020DF0D72E28719775A2FE3E363FBD05123CA5F80CE3C2184E5DF827753FB82165729595C24
Malicious:	false
Reputation:	low
URL:	https://static.kueezrtb.com/latest.js
Preview:	'use strict';(function(){function g(a){try{if("sendBeacon"in navigator&&navigator.sendBeacon(a+"&beacon=1"))return}catch(f){}(new Image).src=a}try{for(var d="/dye?"+["_="+(new Date).getTime(),"type=latest:boot&ac=2&acm=g3l","h="+encodeURIComponent(location.hostname),"uri="+encodeURIComponent(location.pathname\|\|""),"furl="+encodeURIComponent(location.href\|\|"")].join("&"),b=["track","gtrack"],c=0;c<b.length;c++)g("https://"+b[c]+".kueezrtb.com"+d)}catch(a){}d=document.createElement("script");d.async=!0;d.type="text/javascript";b=Date.now();c="latest";try{window.sessionStorage&&(b=window.sessionStorage.getItem("latest_ts")\|\|b,window.sessionStorage.setItem("latest_ts",b),c=window.sessionStorage.getItem("latest_fn"),c\|\|(function(){try{var a;if(!(a=!navigator.cookieEnabled)){try{document.cookie="cookietest=1";var f=-1!=document.cookie.indexOf("cookietest=");document.cookie="cookietest=1; expires=Thu, 01-Jan-1970 00:00:01 GMT";var e=f}catch(h){e=!1}a=!e}if(a)return!0;var k=navigator.userAgent

Chrome Cache Entry: 443

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeD:8DIGoXbfCYKpgrlywuqIQWOeD
MD5:	22EA7455FC49776D3885D9752E410753
SHA1:	995E4F7BDD68E559C6B9B8FBF468BE324746FC7B
SHA-256:	340D1C34DDCB9798A757805C393CEBC14103F6F6B26D3B5E847FEA536F7F1DEB
SHA-512:	C28FE7B4D372CA3A258DB7623B0C9F94520DD0816702EAC5BBFA6A36571ABCA2EA2D66102BDCADD0FCF736E5FD8508FF6FB2A5FD46B2909FC967047CD787872C
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Chrome Cache Entry: 444

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	18600
Entropy (8bit):	7.988463955899812
Encrypted:	false
SSDEEP:	384:RLk9XVbfA+lv/NgyclDVsNnsjGKDdnhWIyXl9S3ZqTEcDpMDPEVLUM1LJ:10lbf7Z/OycronsjJdhKTihcKPE6MP
MD5:	EA2F432547A77301AEBD45EF8BBC8806
SHA1:	AD54F805780D5E9F4200D934AAA059C1D707304B
SHA-256:	1218EE229BCADB09C2025DB9F3C1418EB0527BCEC6AFDC9110BBFA7C5C3275F9
SHA-512:	C3C411419AEC8EC8B45CE5136CD65C19183C96AE7F8C4FAA0E3AE362118679D1DC39A42B31A9A69F9B6AFD0DEE14BB855053BABBA83AF9EBDAFFFE25C75015DA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=4240229526758100&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.D&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C160x600%7C300x600&ifi=16&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283334862&lmt=1715994881&adxs=791&adys=558&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=d&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D4%26monu%3D300x250-160x600-300x600_B4%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dvidazoo_1000%26auction_id%3Df761289e-efd9-435b-98e0-661258965606%26monu_df%3D0.31%26safeframe%3Dtrue%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.31%26hb_size%3D300x600%26hb_adid%3D460a7f2130a0b566%26hb_bidder%3Dvidazoo%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dtrue%26refresh_count%3D1%26lre_rc%3Dtrue_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dvidazoo_chrome_0.31%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3801477003&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.L.3.6.u..HM..P..1n._...U`.n.u\..O?......L..0B.j3>....i.lr...(2 7...f..{...W..#.^.cQ6.8....>.e.i.M..l{...r.....3.F....(g;-{.).q.B.L6....+...E\...P.h..$......."...V..$...AB.e.sA..........n.T5.UM.....U..@..o3T.......$.8...Tc.fV..Sg...ccL.)J....E..U.2.Q."gU.S}C..p7..&...fX..I..>d......CV..0.f..>..r.... dhcc...\.....p..d.e.T.@m..^...O...d.\.?~x.........{g$..-L..p....t?$.w^.x1......./.../g...Wwz....3&..`.?]$...x A....._5./..hsR..\|.&......n. x.^n^..?.....\|...r.....V....../.............vy.>.......Q....I..].U......=).iY.\}%........).n-...*N....o.n=.>:..i.......,......M...].........G.cW.AX.n.<l.h_...g...8........m.sg..]...t.....b.B.....lB.r#l.......\|p.Z.$v....L........LZw%.4.f..MV.........F..q.N...d..l......#.N. j..d.>\|_..\..A.Ym...."...3...A../.nM..C..v...j.&W.....e...fe...=.O.l.y....)..z...._...M.....47Mh.oP..h........NPf.=ZeE..,D.l....$!&......;.s....$....`.5.B...%..,O....X'h..Pl'aW.t\|..... .G.._Pj..0....A.G@.........W........r...z...8.....).n...+

Chrome Cache Entry: 445

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540), with no line terminators
Category:	dropped
Size (bytes):	540
Entropy (8bit):	4.609873607644369
Encrypted:	false
SSDEEP:	12:iWRSafoJfAAH/0HR8/JKAX8iyyyyyyyy9/yF5UFWRSy:iWSa7AH2tAvegy
MD5:	BDF58AD49D2344B4D85C7706C1B665A1
SHA1:	1EA9679198192691A541893D169E272213BCF3FB
SHA-256:	3384A801762F8C42DC495D9640CCE005B93B0F328AB34F89E85660E381913320
SHA-512:	70AA3DD34541F3F21B63C2130165818B008C432B157708FD187B83E5B5B9D523486EA1DA5447740602D02AF5F8CF9CD88B41638F4009D55DE93DB1655845F7AE
Malicious:	false
Reputation:	low
Preview:	Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.Long,java.lang.String,java.lang.String,java.util.List<java.lang.String>,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)

Chrome Cache Entry: 446

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	219
Entropy (8bit):	4.964216548692369
Encrypted:	false
SSDEEP:	6:tI9mc4slicA4nkAHUR3mqZllloEqqqkYj:t4Ix4nkAHkhlllPukc
MD5:	B28071F3B9C4778B36F169BBA3FFDEB1
SHA1:	2E51BC6C662C5E895AA05B9139035B3E4F269D69
SHA-256:	4AF58C04400D32D113FE6384DDC1698AFD9DCF892A1A25970B09E98466582E63
SHA-512:	30CC00BDC153749CC07DD4D7B620B2F33FC9618758CB553D2A87BF99A7A3C0CA4A4A9E53AA4411D3E0E9C4B6E57B1433EAD7BF71C0B93B3C0B1A083A5EDC861B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="white">. <path stroke-linecap="round" stroke-linejoin="round" stroke-width="3" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z" />.</svg>

Chrome Cache Entry: 447

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	99374
Entropy (8bit):	5.556388021359179
Encrypted:	false
SSDEEP:	1536:TUyCxk+8B+EsbbnP0FSaoU24lxVUMu3gAjw3oABd7II/0KcV1rKI3CDig:W/jUJlY3+3oATB/1cOIyDig
MD5:	2F55783E84CEB3BC14814995FB597161
SHA1:	69FA92F97DD27BC417D330A90BD974D478E540ED
SHA-256:	EAA5A39EED4EF87FF816497B44C15B85241A29B5677C3FA460EBAE3CC5804D69
SHA-512:	5D4152B43CE2AC30944137F082F6BFB51D37B1D5ADDA066B34D5787BE6E814F8F9A2F4121900FA52ABCDB21324F72D8A24CC265E86BB27718090DC7DBC5425B3
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/nmedianet.js?cid=8CU551556&ydspr=1
Preview:	(function(){;var _mN = {"_prid":"8PRVCXX19","_cid":"8CU551556","_cpcd":"QAy2WbEfJ_ZGcdP29r4veA==","_sizemovl":{"df":"320x50","ipad":"728x90"},"_verId":"9111299","_oref":"","_optout":"","_uencru":"8CU551556","_limgBeac":true,"_popUrl":"https:\/\/lg3.media.net\/log?logid=kfk&evtid=popup","_shftstr":"sdFlrDO6w94_aNInZitEo1LKByW5-vz8jhqSHcmCA=XkR0JVepPuU7b2xfg 3MT\/GYQ\|~","_shftn":9,"_ydspr":"1","_lbt":"1000","_L2ISrc":"1","_mcf":"76464","_https":"1","_dcSplit":{"G":"100"},"_cfo":["BI","BY","CD","CU","IQ","IR","LB","LY","KP","NI","SD","SO","SS","SY","VE","CF","YE","ZW","ML","IL","RU"],"_cntDetConf":{"parents":2},"_lw":1,"_smp":"smtr","_smwp":"sr\/2722522032\/SAFEFRAME.js","_rtbsC":{"YBNCABID":["1","4","9","7","6","92","132","223"]},"_dpid":"8POH458U5","_dyApi":"https:\/\/contextual.media.net\/dtp.js?","_el2shd":"100","_l2qek":["fnAtVW*uFLkzK(","7pxsTUl)ChSE-Q","_Pjwb4ogM0dvBG","Hmyc9OeR.ZqY5!","NiaJ~D23XI816r"],"_dUrl":"https:\/\/contextual.media.net","_lHst":"https:\/\/lg3.m

Chrome Cache Entry: 448

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2986), with no line terminators
Category:	downloaded
Size (bytes):	2986
Entropy (8bit):	5.2384777059405785
Encrypted:	false
SSDEEP:	48:ZIFr3LbIdOA6Y+OxjnU29+XDUZwizFsax/jQvY7JXRuiUMf9q90vYSNpRt:ZkLbIdOA6vKe4ZLO6UvIy7S9q90vtzRt
MD5:	1E9284D9A710102151A42042485425EC
SHA1:	2237B6960E323884F330DE43A3EF3D6F0C97A69A
SHA-256:	851AAB34E9B9E9C6252ED4A0BD57B30A79795AACDC7E036D7E824ED9E69B2807
SHA-512:	610A9FC78DD8424CB755FBEE4A58659D435F2DA7A8CD2039BAC9B8E3F0A14B270EE53BC10BD8C06737AB901DEEF10E92A905DC06A3528BC7531BA811D1355F10
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1931.004-3.034/frame_inplace.js
Preview:	var IL_FRAME_INPLACE=function(){var _,f;return{init:function(){window.addEventListener("message",function(i){try{var n,e=JSON.parse(i.data);switch(e.name){case"isIceApiReady":e.slot.id==window.infolinks_config.inplace_slot.id&&(n=JSON.stringify({name:"registerSlot",slot:e.slot}),window.parent.postMessage(n,"*"));break;case"renderProduct":var o,t=e;window.infolinks_config.instance=t.instance,t.hasVideo&&(f\|\|(f=!0,(o=window.document.createElement("script")).type="text/javascript",window.top.infolinks_async&&(o.async=window.top.infolinks_async),window.top.infolinks_ddw&&(o.defer=window.top.infolinks_ddw),o.src=window.infolinks_config.basePath+"/frame_video.js",window.document.body.appendChild(o)),window.infolinks_config.vastAds=t.ads,window.infolinks_config.videoScale=t.videoScale),_="u_IL_INPLACE_"+window.infolinks_config.inplace_slot.id;(s=document.getElementById("IL_CNT_"+window.infolinks_config.inplace_slot.id))&&s.parentNode&&s.parentNode.removeChild(s),r=t.width,c=t.height,(p=docume

Chrome Cache Entry: 449

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	121
Entropy (8bit):	4.510055451767887
Encrypted:	false
SSDEEP:	3:YWQRAAsVJCEAAMgHZtCGWoLS4Nec9nQksdfH42VSVZH4L:YWQmh7HApgXC/SNJmdfvVmd4L
MD5:	54650AFC1491C62C48C7578E0D07D13E
SHA1:	4E91E9F842E33988E2B175CA0BD6BE96609F5F77
SHA-256:	4A75E497745679DA7E95D5371D8D2586671D4EFA9225D35E5E659692C257F151
SHA-512:	BFB9DCA5DAF89150C8F9FFA1BBEF47595A67D4F2DDC0FAE6EB27F417BE5ADA2FBF65AAFA302D475F4CBA63A5C548044FCF04F93D93544C1C47C7B55DBEC9B749
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/ppid?pid=0015a0000344WLkAAM&ver=1.10.0
Preview:	{"succeeded":true,"data":{"eids":[{"source":"adnxs.com","uids":[{"id":"6403784576581203868","ext":{"stype":"ppuid"}}]}]}}

Chrome Cache Entry: 450

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 451

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.97177460040716
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoe4n:8DIGoXbfCYKpgrlywuqIQWOe4n
MD5:	16EA81CC65A05B05B549867D16256872
SHA1:	A054E843320C2B0DD2F087395C8E644C484B1590
SHA-256:	8DD2276BC3539358D9A3DFB8EAB4077FEA1861E8B3EF3AF58AA2C3F59FDAE52D
SHA-512:	ED3237D2EC490568C2409E4E77251C4767CCF62127A37D3BAE1A6CF03109365A54D8D616A598663E09F8A2111A4773616B64EE30BDAC4CF09CEF4B7A6C087AE8
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Chrome Cache Entry: 452

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219100
Entropy (8bit):	5.4175224866158205
Encrypted:	false
SSDEEP:	6144:hasUmZDxzWNLXNCC+iZMFLCXQyq3ZRGMd1g:1nvB3ZkMg
MD5:	CDF0E48A2338C564B10C707424B82EBB
SHA1:	1468AA59B66F55FE50D1BAD8E73B6A1BDB8D93F7
SHA-256:	F860805800875DA202A4D22D7B42F596AA87139DCF425E96DB78BDF60AF687A3
SHA-512:	AA904C8380EB22453A98ABF00F757370A279027C67985128C375C9FC38B8373F490B3A9B09E4A44DB718A200FF35E4C0B3156FC9DA69216BBDBCD7DE067F035A
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.fh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.fh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 454

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	6.554236990604597
Encrypted:	false
SSDEEP:	3:rU3odw/lJykh8QI8GcZ7yrCJLbXhq37TjC0wL3r8Og6+:g4qvyZXSbsTjuv0
MD5:	47D2F6083DF8F2373FC475A524D373D4
SHA1:	E81309F7F664070B5597F5CE060C6B03550A350B
SHA-256:	2872A94B4F141E4DB6261E0E0DE43661585FDDA96F274AC349D733435DC75A26
SHA-512:	72D4DF361CC549CC6EC8CE52B54E73E8954A5DE5AE8160CE3241197C8004A7B8ACC1E1FFA689FFAB7868B80D334284D4A4D2324998C1FD338BF6A3A22CDB0E69
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=522793913156512&correlator=676673978452479&eid=31079956%2C31083632%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=160x600&ifi=4&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339744&lmt=1716105411&adxs=8&adys=446&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&vis=2&psz=160x-1&msz=160x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283340&ga_hid=421100937&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283332631&idt=6344&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D160x600_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3Dundefined%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3703167312&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.......}..'?.....$...5..0...i.........t"?.5.B....T,.W..4-.,... ....H.%.\.{..J...j.v.k.?.W.Py....1.$4.@R..W....v.m....t..<k..-O.N..n..7.

Chrome Cache Entry: 455

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.97177460040716
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoe4n:8DIGoXbfCYKpgrlywuqIQWOe4n
MD5:	16EA81CC65A05B05B549867D16256872
SHA1:	A054E843320C2B0DD2F087395C8E644C484B1590
SHA-256:	8DD2276BC3539358D9A3DFB8EAB4077FEA1861E8B3EF3AF58AA2C3F59FDAE52D
SHA-512:	ED3237D2EC490568C2409E4E77251C4767CCF62127A37D3BAE1A6CF03109365A54D8D616A598663E09F8A2111A4773616B64EE30BDAC4CF09CEF4B7A6C087AE8
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Chrome Cache Entry: 456

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2268)
Category:	downloaded
Size (bytes):	2357
Entropy (8bit):	5.692761368522272
Encrypted:	false
SSDEEP:	48:tzoSN4PEKf02lgFcNjzkHTjvt6kDCRYz0O:tzVduglHfV6nO
MD5:	9083501649BD19E07735F353CD893839
SHA1:	19DAE73EF0A47AAF4A2007EBB7784ABB7CDBC148
SHA-256:	05798AF197D09843E579706C8BBA6E2D69DED500D34F3E9E234F589DEF40DEE9
SHA-512:	0FD1B3932AF578A2C169DECF2A3A5514D2A8846D0017B314746A9BC1AF341277EF568CD4F10253F47FCF51652852331D9AFDAF88C3C0300D9608519ADA8D9EF7
Malicious:	false
Reputation:	low
URL:	https://prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=179b87ae-9f2f-46eb-82c4-75c95ef3faa4","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://id.a-mx.com/u?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Damx_com%26uid%3D","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dopenx%26uid%3D%24%7BUID%7D",

Chrome Cache Entry: 457

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://x.serverbid.com/usersync?gpp=&gpp_sid=&ttt=1&src=2&cspi=0&cn=5528&spui=&dpui=ZkxnuNHM6HMAAHezAHb..QAA%26983
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 458

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeBM:8DIGoXbfCYKpgrlywuqIQWOe6
MD5:	2CC3A3ADB825E22693BBDF34D4CBABAC
SHA1:	5A5428B64D8BB0C8EA9D7ABF59777C3EFAAB319B
SHA-256:	AF46AD78AC993584D07515DF46A683E8AF4CF0D26BBF34EBF74E1D40F4A2ECF2
SHA-512:	FF3C1B46C24793D15450EECCE588854DB2E6791002399B4B26C3E68AEBD3CC04A2F2C6CA05F3C40EB33828EA11BFA80C1AC19E4655E2421B65627C1257FEBCF6
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"7"})

Chrome Cache Entry: 459

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.965323240314742
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeO:8DIGoXbfCYKpgrlywuqIQWOeO
MD5:	64054D2F539B89F9F8F392F92AB61E3F
SHA1:	B779E2C1B8EAB8206DF5F4515C60A416C9CD2C18
SHA-256:	CACDE0D17DB53746723C2C56268C14D6CAD7D3B96A9741866C30484AB9ED74CE
SHA-512:	6719E1545789BDAC4F3C4DA4435D1530F265F0C7667B31045F16A88B0DBA15A24A025B5178E9AFCE6FDE1AC70619A4AEEA664219632323BE95424E7FFEA4963D
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Chrome Cache Entry: 460

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 461

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	175500
Entropy (8bit):	5.431517123659291
Encrypted:	false
SSDEEP:	3072:OUYEJfDv1P7udoXuEJdXdNd2YJUFKFG+g5pvloI4s:NDv1P7udOugRdNd2Y4KFGnY+
MD5:	439C379E1F77CE836586E8F57A893E1A
SHA1:	A8F8EC7BD258E265A0FB04A898BB0615A0644068
SHA-256:	DF2FEAEDD4E18A9D44CCEC15A396C02454F545574FACBD9E4B8E9B8D4FC83CA2
SHA-512:	80C1B35A6C38E348D715D7840F1C857CFCD8D4EC596F43665A75F01A20DE0718B5BC19791292F613EB2E915D0DD7CE7C9C3294DA3F6208F305C9536F2F9C3388
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/app.7.254.0.js
Preview:	(()=>{var e={2248:(e,t,r)=>{"use strict";function n(e){var t=0;for(var r in e)e[r]&&t++;return t}r.d(t,{k:()=>a});var o=858;function a(e){var t,r,a,i=n(null===e\|\|void 0===e\|\|null===(t=e.purpose)\|\|void 0===t?void 0:t.consents),c=n(null===e\|\|void 0===e\|\|null===(r=e.purpose)\|\|void 0===r?void 0:r.legitimateInterests),s=null===e\|\|void 0===e\|\|null===(a=e.vendor)\|\|void 0===a\|\|null===(a=a.consents)\|\|void 0===a?void 0:a[o];return 10===i&&9===c&&s}},4876:(e,t,r)=>{"use strict";r.d(t,{_:()=>c,u:()=>i});var n=r(1580),o=r(676);const a=n.createContext({betaName:"",betaVersion:""});function i(e){let{betaName:t,betaVersion:r,children:i}=e;const c=n.useMemo((()=>({betaName:t,betaVersion:r})),[t,r]);return(0,o.im)(a.Provider,{value:c,children:i})}function c(){return n.useContext(a)}},4476:(e,t,r)=>{"use strict";r.d(t,{O:()=>i,m:()=>c});var n=r(1580),o=r(676);const a=n.createContext(window.matchMedia("(max-width: 600px)").matches);function i(e){let{children:t}=e;const[r,i]=n.useState(window.matchMedia("(

Chrome Cache Entry: 462

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 463

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeBM:8DIGoXbfCYKpgrlywuqIQWOe6
MD5:	2CC3A3ADB825E22693BBDF34D4CBABAC
SHA1:	5A5428B64D8BB0C8EA9D7ABF59777C3EFAAB319B
SHA-256:	AF46AD78AC993584D07515DF46A683E8AF4CF0D26BBF34EBF74E1D40F4A2ECF2
SHA-512:	FF3C1B46C24793D15450EECCE588854DB2E6791002399B4B26C3E68AEBD3CC04A2F2C6CA05F3C40EB33828EA11BFA80C1AC19E4655E2421B65627C1257FEBCF6
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=7&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"7"})

Chrome Cache Entry: 464

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeX:8DIGoXbfCYKpgrlywuqIQWOeX
MD5:	500562A68030EEC4C03BC133070D9C0B
SHA1:	9C8C2EA2056766161C0958931A3662B85056BE2A
SHA-256:	5A5B947C1FC029EAE511B440972A8D575E6D0E99E547B2BEE2219CA11CC78A19
SHA-512:	9A3DCF23DA09BBCA43D8D310FD2DEB65CC89581947701F6AC9D6923C74296A9E35AC3B4C7CA9A09F2AA5FBABB179618228A5E47737460612D68980F4D4BC0DAD
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 465

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 466

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2049)
Category:	downloaded
Size (bytes):	2050
Entropy (8bit):	5.506464218877097
Encrypted:	false
SSDEEP:	48:2/pveSjm5reyxCGwSjmgDLredLNKSjmeATtXVp7PqHhd:op2Sjm5rNxCGwSjmgDXqMSjmeAT9f7iL
MD5:	B5D9A0F424EB682F787A3ED50FBC27A7
SHA1:	FC6757FA2D051DD03BA5BAF042695F004B599D3E
SHA-256:	9A98C1E07A6F686E2AE064F6F35BAA2ECE26020954C35404D0960B98BEDF1399
SHA-512:	E5A2963B8003D219A0E4AC46EE57BF4516FF488E46D2E96621A75CF4C4EE884CDFA141371D0D06BE90CA8EE0A4CC6A93173EAD719608320F21BCA452B29E3559
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=
Preview:	<html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dsonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%5BUID%5D" width="1px" height="1px" style="display: none" />','<img src="https://u.openx.net/w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dopenx%26userId%3D%7BOPENX_ID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D" width="1px" height="1px" style="display: none" />','<iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=vidazoo&endpoint=us-east" scrolling="no" marginheight="0" marginwidth="0" frameborder="0" width="1px" height="1px" style="display: none" ></iframe>','<img src="https://x.bidswitch.net

Chrome Cache Entry: 467

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 468

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1743
Entropy (8bit):	7.894011245097894
Encrypted:	false
SSDEEP:	48:uCw/rlU41J+jXucAsKcfkBQ4CjPTciVoU6BDo4RzVrJOKprRU3fdU:uzU41J+70ccBQ4CjgI+1plYarm3S
MD5:	2886715C92BBFB98859F23227878B150
SHA1:	2FCD18976C36CA7B560E810A413F3FF2DEEC5852
SHA-256:	67A2CA96C292DB4B5965374C0DE1B2F6C6406CFAB7E5DF42032476F777A9C6B9
SHA-512:	50F23D277079047E45356085967743534863FAAAAAEFCDB9C69ACAF97BA854D463FFA2BE231424D596B250E93A0C73961D18CD1987AD7F4A218BF493E4242492
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	......[....7.G......m.......2C...Z......K.\w..J..69 .....!(.xF....z.6GF.}QW.../q.....`..u.)..W.~..otj.p...#}9......%..2^.Z..N7(K5=.3...;.Tb.J..$.7..ZfcgU..1.......>.r...DW.vW...........u..k?..!.....V..!k.../x.T..E....u...%.. ....5..r....<.3.2<.M..e...'.-.l#}mQ....f(....[.....\|...9.....h...p..x..H..M..?..Z...9.....ej$.=&..'...'....szW..fB..@2....C&.....n..:.Y.dK.....e..Td.)).8.<.d...'..I.qL.._?.....u...W]s]. ...PH%7...z#...M.a.W.D.E.&{.....Y/..\|.$.!..3....#...............eHm.T...M+v..Y..+......^..[...Oa..D..............84... ...5.c_p..h.cA..L..Q..C..\|h_.)q.b{?}.\}.m..tWZ.....S.}.).E...s...dwN.K.<.H..e.i.Y.s.....=i..M..e]G...p6..L..z.o.A...8...I18...9<..[........oa.!.....@..t........h.........r<.$P...h....'.....k...>..TP%......l.o.h...*........x...O...5.\|.5.H.f......6..a.v.A=l...mV.\..{\.0?..W..@..P.[.ie....C..@Q&.\..\.Q...r..P.....LW....:....q._.w...."r.Z..^.`..&@.,...\|......i...l..).(.W`.E.j..%.L.m.i......JW. ..f.l....O.N.

Chrome Cache Entry: 469

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64239)
Category:	downloaded
Size (bytes):	565861
Entropy (8bit):	5.383393134527782
Encrypted:	false
SSDEEP:	6144:b2pmiryBxD5Q3BZDq27XIV9YJS+kp0Fz4ykCYFsrwgpRmSBbX3HkBwLO4j46RE:my5W1sUouEimmkBD4j46RE
MD5:	8216266849D8519FF77BA7B646663B83
SHA1:	72B9BE49FDCCDB0FB0F3A19E3A159E3277B61D69
SHA-256:	6067299F7E7333EF2D23A8B43CACCB2F11A9D45292D34B197669969F887B542B
SHA-512:	82AAC49E9127D3AEF2BA1DFC3A498ABB80A0972A5BC3869D13B0E067A83F0D6E4F4C8C1D748B32A42A6DF602200644DE9288E754F7F9DC6B894412C0F618DC51
Malicious:	false
Reputation:	low
URL:	https://live.primis.tech/content/prebid/prebidVid.7.16.0_26.min.js
Preview:	/* prebid.js v7.16.0.Updated: 2024-05-02.Modules: schain, currency, ttdBidAdapter, nexx360BidAdapter, stroeerCoreBidAdapter, richaudienceBidAdapter, minutemediaBidAdapter, gptPreAuction, smartxBidAdapter, kargoBidAdapter, adkernelBidAdapter, sonobiBidAdapter, sharethroughBidAdapter, emx_digitalBidAdapter, smartadserverBidAdapter, freewheel-sspBidAdapter, identityLinkIdSystem, sharedIdSystem, lotamePanoramaIdSystem, connectIdSystem, userId, pubProvidedIdSystem, id5IdSystem, liveIntentIdSystem, unifiedIdSystem, uid2IdSystem, consentManagement, sekindoInternalBidAdapter, ozoneBidAdapter, resetdigitalBidAdapter, appnexusBidAdapter, adfBidAdapter, openxBidAdapter, rubiconBidAdapter, telariaBidAdapter, pubmaticBidAdapter, sekindoGeneralVastAdapter, rubiconBidAdapter, ixBidAdapter, spotxBidAdapter, pulsepointBidAdapter, consentManagementUsp, medianetBidAdapter, tripleliftBidAdapter, admanBidAdapter, 33acrossBidAdapter, yieldmoBidAdapter, gridBidAdapter, undertoneBidAdapter, gumgumBidAdapter,

Chrome Cache Entry: 471

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 473

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	4.265319531114783
Encrypted:	false
SSDEEP:	3:YTyLSKwhpH0n4n:YWLSdhe4n
MD5:	9A607BA8723E0AD47060C66784B93ACE
SHA1:	BC570344A261BFADCF3CCAF12A92A3AC01842FDA
SHA-256:	85B4B58242116CE8841FFE38BDA08BA3A6C413C61F166AF208014C2650F5E900
SHA-512:	5930E6A50FE685ED0942ED45D0DC02C39723F38390A5E573335A10522EE5B75F7B9FE4945871F401E318E979313EDBBEA389535156C070D341255A58605BE75A
Malicious:	false
Reputation:	low
Preview:	{"version":"7.254.0","betas":[]}

Chrome Cache Entry: 474

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7660f095-8567-4e13-b266-ede79c1f7a19
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 475

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 477

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 478

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.582040421766031
Encrypted:	false
SSDEEP:	3:ruSqDDJQHscggZmQuNACsI+CMnsKr2OkMze4bRfI6M/l3:aSsczZnxCgnswpkMznbvM/l3
MD5:	A7B3570FE18AC1A16F7D3A28566A1E24
SHA1:	895DB356D6A8671BA98737B684A0BB296C2B1246
SHA-256:	E40C84DC2C1488C7D150792ED38293BF3B2623ACAAD129F591F8C87C916B6921
SHA-512:	A1EE388E433FCEF6FD347031F5C09B13F931F8F4051B853179EB7EB6FA3331C3F56FAE6B134C12EF4A1BE5EBDFDC5F02F8642F67ACA66625F6B52707A4600B6D
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=522793913156512&correlator=3484178451124135&eid=31079956%2C31083632%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=6&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339749&lmt=1716105411&adxs=790&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&vis=2&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283340&ga_hid=421100937&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283332631&idt=6344&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D300x250_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_500%26auction_id%3D116ad475-822b-4f6a-878e-9d7c11f60ce8%26monu_df%3D0.07%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.07%26hb_size%3D300x250%26hb_adid%3D1328a4bce8a9f327%26hb_bidder%3Dkueezrtb%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.07%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3Dundefined%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=434882259&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....muJ....x..O&........./.........t"?.5.B....-.T...5J..j.../.2..B.0I^..[.+.3..]..u.:......3e..15C.CF...:...%.R.\|Ngg....'`...H...K.

Chrome Cache Entry: 479

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeD:8DIGoXbfCYKpgrlywuqIQWOeD
MD5:	22EA7455FC49776D3885D9752E410753
SHA1:	995E4F7BDD68E559C6B9B8FBF468BE324746FC7B
SHA-256:	340D1C34DDCB9798A757805C393CEBC14103F6F6B26D3B5E847FEA536F7F1DEB
SHA-512:	C28FE7B4D372CA3A258DB7623B0C9F94520DD0816702EAC5BBFA6A36571ABCA2EA2D66102BDCADD0FCF736E5FD8508FF6FB2A5FD46B2909FC967047CD787872C
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Chrome Cache Entry: 480

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	19682
Entropy (8bit):	7.99051914186713
Encrypted:	true
SSDEEP:	384:vyXmo0GOo76L4TmwubTRqZM07OJt8q3YWq7Y2TNU8:vKmdG4L4iPRbJ33b9kNf
MD5:	1FBCE84058B1AD24B746C15368845545
SHA1:	FE853885B3146995C610651A583413E13DFB0C29
SHA-256:	73ED8F6E7CD814DD05A672697BD87C8B93D3E359F0CAD6D0463954E1FF7E5EBC
SHA-512:	B290C54E173BE8878A5FA77EC42D712697166E570C6DFEEDAA266BB3976A11D025EEBFC23D47033E9D3B90A4540C63E1A64649889AF6B67364EFCBD34B03CBDF
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=3423787827670814&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=9&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342360&lmt=1715994881&adxs=330&adys=1703&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=300x0&msz=300x0&fws=4&ohw=543&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=Flight%3D1%26monu%3D300x250_B1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=4216580245&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.6....z.R.z.......................NMUS!.M.<.....2....a.@\:0...........2`.........QH(..$...u......q.-.WR...wo..AtR...M.L.Ar......d}...6s.H0.....n`.......j..:..Q5hT...fF..;..-r8..qsU.YypL.;.m.(RhM.(..2nM.H.E.".b.I..(r6...Y..vL..8H.i24M:...F..I\|..1.{;.n$$.}.q.5b.I64C...~.A.B..;U.N..9RzI.7cO...h1[.......O..&/_~..H..Y.&".M.'_(f.@.....X.w<..G....(<..R...g.j...0..b...b...f...r......0...K....t.;._..\|n_}.P].x.Y......'W..M...[..T....B......0..G.?>\|\|s....E..xs.........EN.y......".._/_.....A...z..zW.b..@.Ii18.`I...'.....-......ec~.....H@....J.....m#...'v..r....:$?......O.,..9....w.Y...b.._9}.82.\[.E.(...B..>9g...MK}........L..[.EV.6r...v2.....QtG...aP..\n....5... !/>~........7.$.9h..@.O2..r.y..X.y.%.T...9.[.R.......7f..R...`... L.I...&.DnHO_)...........d.U\.......!....y.....F..e\.....]SY..!...G..H.$t./%u..y...E..@.@..Pd.'....i.Z/.......'1..{.^W.nIipB41:HQ...f.1...X.MU.*.#...[..4.-.\..)uY.....W&..':.EQn....e..!..2..C...-^{......v....}_.

Chrome Cache Entry: 482

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15562), with no line terminators
Category:	downloaded
Size (bytes):	15562
Entropy (8bit):	5.496522114175185
Encrypted:	false
SSDEEP:	384:ikBy6l6J01yJyFusH/4dvZbxZpmM+4fCVTomdNo0Pwk:TIq6J00JyFtPd2U
MD5:	10DA3249009C676657093E9537DFFF17
SHA1:	51BE73E8597BC74E575A40CE0C388D9A2F90E3BE
SHA-256:	326B658D124E7D0C26F4B8F2B76D2B814494E4E984801A45FA7B573F1022AC97
SHA-512:	FB40E54D373E6CB1ABFC32D6080B5C5B720012F3BFF76A6FE53E220592F1EF98AEC35C3E757B469AC126A459723A3BFFAD6591CDAD761ADC156D65CD06056C73
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=&gdpr_consent=&us_privacy=&p=156319&predirect=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D3%26src%3D2%26cspi%3D0%26cn%3D3%26spui%3D%26dpui%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,az=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aE){return typeof aE==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aI,aH){var aF=0,aE=aI.length,aG=false;for(;aF<aE;aF++){if(aI[aF]===aH){aG=true;break}}return aG},n=function(aE,aH){var aG=aa.document.createElement("script");aG.type="text/javascript";aG.src=aE;aG.async=true;if(an(aH)){aG.onload=aG.onreadystatechange=aH}var aF=aa.document.getElementsByTagName("script")[0];aF&&aF.parentNode&&an(aF.parentNode.appendChild)&&aF.parentNode.appendChild(aG)},aq=function(aG){var aF=aa.document.createElement("iframe");aF.src=aG;aF.style.height="0px";aF.style.width="0px";aF.style.display="none";aF.height=0;aF.width=0;aF.border="0px";aF.hspace="0";aF.vspace="0";aF.marginWidth=

Chrome Cache Entry: 483

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 484

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.965323240314742
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeO:8DIGoXbfCYKpgrlywuqIQWOeO
MD5:	64054D2F539B89F9F8F392F92AB61E3F
SHA1:	B779E2C1B8EAB8206DF5F4515C60A416C9CD2C18
SHA-256:	CACDE0D17DB53746723C2C56268C14D6CAD7D3B96A9741866C30484AB9ED74CE
SHA-512:	6719E1545789BDAC4F3C4DA4435D1530F265F0C7667B31045F16A88B0DBA15A24A025B5178E9AFCE6FDE1AC70619A4AEEA664219632323BE95424E7FFEA4963D
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Chrome Cache Entry: 485

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	5.099351535018658
Encrypted:	false
SSDEEP:	12:YwnYrbJzV1Dmnubov1DRnz/ikuTcBreSDs:YwnY3FV9mnGm9Rnz/iku4U4s
MD5:	C2E44327D687794FC94587A5BE38DCC1
SHA1:	87964D54DC486A4EBC53477C60FE7EAC4C8F98B1
SHA-256:	7CBBF3F7994C032A73BE19B7C0B1CBA409FC8306519A79DC5E3CC1512D9C07F2
SHA-512:	5E173280BCD45F59EBE5E6C6AF67FA5E1A993DC7404CB2AF149335D6251EFBD3B710C759754CEA4001152964CEA56858478E316976492F67609E20AE0C11E3FA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=3505740865554898&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=9&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1716283297842&lmt=1715994881&adxs=330&adys=1703&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=1&psz=300x0&msz=300x0&fws=4&ohw=543&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GN6W09P5MUgAUgIIZBIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=Flight%3D1%26monu%3D300x250_B1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=4216580245&frm=20&eoidce=1
Preview:	{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,[["ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ",1749979300,"/","custommapposter.com",1],["UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA",1749979300,"/","custommapposter.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNau78O1noYDFSCXgwcd-4cPlg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"9",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC",1731835300,"/","custommapposter.com"]],[]]}..

Chrome Cache Entry: 486

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Dyalog APL mapped file 64-bit version 51.74
Category:	downloaded
Size (bytes):	28941
Entropy (8bit):	7.993607953990899
Encrypted:	true
SSDEEP:	768:qfCTPoTpoeU0YiXAQPQZvEoJVD0dlT4BnmN9s9:3jjeU0YiQ1ZXVOx4BYe
MD5:	4B21A08042712654272794445718857D
SHA1:	B9AA0FD5E1548C417313203899A135EF8F053FE4
SHA-256:	8BAB63BCA4DA2C780F889274EE71E71FE3B076BE0E92AD2BF2A7571664089CCF
SHA-512:	27EEB4FF748BAC7C93E96F82B3DAC044AF5BA42022BB524A4EBDCEF599307AF5C260BA778708F310256497090A1CD82CAE45C779AA04AA3952A30339EFECFB7A
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	..3J.6-..v."..n-.f.......].....1D..fU{ 'T4..Q{a..).k4..,.$A.<..J....L=..\jN.... hH....x.Z........../X..C........7....BR..b....DE..K.:..-....V.<.48...!.mEg`...$y.......R..8fM..........^'....@.P.. k/A...o..n.B3G:.......;I...Zt......~..R......tp^K.;&...m..W}.b9...O..;z...B/....a.R......q.R..}..$...R..W.....i.....].\.L.J.2........LQ....~.._..k/u....{......(V...B...l..D...f..\..d...$.V<7Z...58.e......10..,=.EU.g...!x.(.u:.vvR.y.f.....iV..%4z.[Qs.t..+-....U.zv.. XV%...&.5.Qr.+...............>.4..l.$5&%..).cQv...}..@...IW.B....aB.I.;........,m..51.z...b..]......8u.....2\9.{.R.I.!'.v.M.i.!!4w`[....'........L..6DEp..1=U.8H...Y.-N..6Z...........w..w}[..o._....(.........o,V..;`..Am.=.s..zx9...=.No.M`D.^.......A1]B`...FQ.:.}Q. .Y.m1M.W...Y..0..C.3..>...p...".F..#pqz.C.X...d.O#.C...>....Z..Au...d%......1.c......m...hZ..'..kiG....x..S.M......Oc..#8gmU...f[S6...Z.O.s.\|......wa=..p..:..o.Y...7....].t...M.y...T.iHK...M\e9.......p..d..]..;.n....:...Hz#-W

Chrome Cache Entry: 488

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0015a0000344WLkAAM&src=ima&ver=1.10.0
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 489

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 490

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/fonts/icomoon/icomoon.woff?7m5yri
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 491

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&ct=y
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 492

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 493

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	21551
Entropy (8bit):	7.976320459235576
Encrypted:	false
SSDEEP:	384:ltgG46U/SsMZkYxchYFx1WGScA8XugcQaM9AST+retOslAA1jZpsab+XUeY35ivp:YG43/lAqhWScFXuElxkANcabgU0h
MD5:	FB30F9A85C46DB90CF4F0E11DD7C1D18
SHA1:	A32BEB05344DF65CE5A6BE97AAF43EA99009270F
SHA-256:	56D35B71B20B8CC26584C9E5B0289626A570112323AD0EBC992A0FBD1BFDD4B0
SHA-512:	D3486A5EA46280446E4DD67915C8C1624AF340726A3916CEBBEF827E63D9A654E45D8C823FB9359F886C530980CC14F3F731796B17A22E7F4EE2DE0232F825D4
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/12803040820611783542?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qkwhUJlZLUQ6VILF6H7DhqCfFEcPg
Preview:	.PNG........IHDR...,.........,.......PLTE....................................................................................==?//1..... ......!"%......@AC...89;EEG...!$-...&&'347,,-...&..LKKQRS...9-).g...$2&"e.....A50#(4F......l....",;...'.....XVY,..OIU...H=7zex+2=a]`_A.@>p.V.40g....l.R?=IG\|._.WKFlL...$...E,...hgkgYN.b...(...S8.az.yW..x.....i..t...`mhR8..sf\V7%.F..XC[G-.?~.O.,...^m.p[.M...t;7....t.gFUB..}yy5 ..7gruq.0\.ZSD=S..~.0wb/.....Xq}.enqVk.}dVNi.0....rb.........Ucu."@.vZ.....s..p...7m;.FJM.GNM$2.....u..EV:Lf"eg....@QZ.x?<......I[f.w~......PC...?.}.....ru..4.7+..v..T..>....f_Z.].{.km...l.C1.^.V...E1&DQ....t........U.<..I.Uv`.!.r..a.j%F... ..I!.,(....=+..nz.VO....A..A.~.pZ^.l....T.4."....[.......YW..]..F...,%..a...tu.oL....X.DKo.}r.....a...zuK.:....\.kM...m.......=r.m..P.IDATx..Q.. .C....4.==Y+...#.I.....:..k.r..@....+...'.(.f.x...}\|...AH.M.@.T..8....H......D..<......fc..c.'.."Ypoj.t..s....n].}b.......PW..fA...n4..^.SC...................s6q.:$2

Chrome Cache Entry: 494

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.010435196472538
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoeCM:8DIGoXbfCYKpEeYlywuqIQWOeCM
MD5:	80C1C445A1A0ECBD8D5481E8C0263463
SHA1:	C8D1F5A8C7103909404E23CB920468FBF8384D62
SHA-256:	A72B8E07832222364AFC552C1F6432D7BC60D054B263875DEB471DDD32A24213
SHA-512:	7ADF488180C9FAAFDD1C91C935A936BC37F6CFB8D92A88A07C608C080A29AFD3B02669E6219D2A1DC075D5CD1C61727637B15DF25E90281F853DDDF39A966940
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=8&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"8"})

Chrome Cache Entry: 495

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1661)
Category:	downloaded
Size (bytes):	79375
Entropy (8bit):	5.279811043723645
Encrypted:	false
SSDEEP:	1536:BePt65inh87I8PVklEV1ufJ8VpemkR+EJothFGXRhek/nugMAA/zwRkb39wR2bp4:YPZ1N
MD5:	9BDEC77C5820BAD80D206D1CB67C379E
SHA1:	F667CCBBF6BB14D371F5DEFA8AB3D0B96F9A0EFF
SHA-256:	A8E7D37F1DECB7CBE6CF9C11546C19168E41C490CDCCDADD65AF487D0B8E8E32
SHA-512:	1AA287D9552C558BD25394DF97FB42EB8952938BD5946F497000759C4D143F2E252C3E3C4BA127DB29E024A26EC6E8B636D067C100B57A45AFEB65E5E219689A
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/search-article
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<meta name="csrf-token" content="p5H55rcqFTMQQQnoU4EzYOOvNwffQSEvj2WG1ZMk">. <meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1">.<meta name="msvalidate.01" content="77BC9EC2757BFFD6B08AB6E9830867E2" />.<meta name="msvalidate.01" content="8F0A17F8B7EE136DC522E193ADA44AC2" />.<meta name="msvalidate.01" content="81E0B92D870F20A5A81469EF8E834B59" />.<meta name="msvalidate.01" content="B3D56BE8396E01BC4B5FF1FADDBFEBAC" />.<meta name="msvalidate.01" content="6CF243145B598540D3EBE639EC0CED69" />.<meta name="msvalidate.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" />.<meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" />.<meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" />.<meta name="msvalidate.01" content="58D49F2458FE6C8E642907D29D522720" />.<meta name="msvalidate.01" co

Chrome Cache Entry: 496

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.9767834199139562
Encrypted:	false
SSDEEP:	24:XwmdP8m8m8mUm3m8m8m8mhchhVX8m8m8mh8mxm8m8m8mh9m8m8m8mhTm8m8m8mh:XJzll9WlllhchhVXlllhlYlllhclllh+
MD5:	6D866D9C4568BF7FC03E597E74CE7E28
SHA1:	E1B3D9F0E9CDCB785A94B6C1E1FE651A4FF98DCB
SHA-256:	7C1925DA382279A72F94990D0A1456F78918619F35780EA0905E4AE0DB684677
SHA-512:	7DC58E58FC991E2C9310E22A6761AAA398586082C13FD7863FCADD48E15CEF8ED7337DC33D0ACC0D0B9B698D4D26ABBBE6995FA48D2C9CE1161B2F39FEA2A381
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................64..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..&%..64.." .........................................................." ..&%..........................................................&%..&%..........................................................&%..&%..........................................................&%......................................%#......................&%..43......%#......%#......%#......%#......%#..................&%......................................%#......................&%..&%..........................................................&%......................................%#......................&%..&%..........................................................&%......................................%#......................&%..&%..........................................................&%......................................%#......................&%.." ........................................

Chrome Cache Entry: 497

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 499

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.080128836461764
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCfr:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr1N
MD5:	946F5035D93594E97CA65612B18DFAD9
SHA1:	7A48CCF8A851350AC3BB23B39D2332033ECF0E14
SHA-256:	8422EFB2E4316301C7DC8D03C485B4AB69D261EE091505D8B30E22A5AFA6C2F0
SHA-512:	369E3BDF0CFA0C8286209E2D29DABB6388F2DDD511586FD48D3D229893D51108083AE603C3845833754773E609B3933C9F3C00393F1A6755D2C471D21E379EE6
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"15"})

Chrome Cache Entry: 501

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 412
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	7.152520288572606
Encrypted:	false
SSDEEP:	6:XtJbOlw1DY4uywb8XJIPZqAU808bGy8elcD6YlVxRGkiLk+f0DmgMzTUvBJMz9MG:X7KjyA8XJMrd08bGy8eloRiLkU0pARzl
MD5:	DC5C711AD30D131A835943518CAA5CD5
SHA1:	8F2B97366D4A41DE94C6B04440CA004254580BA4
SHA-256:	9508E7AA4648C84ADC8D99C96C6BB80C4FB95B49574A5F53029324A8ADEB680A
SHA-512:	712A21F1DCF551E2D0AE9A7DF5FED42436088226C630DFFEF971E4DFE2C603EE7C86BC0EBE687A3389DC7FF85960E8403D6CD04D85B8AE04C794733BF3742DAB
Malicious:	false
Reputation:	low
URL:	https://u.kueezrtb.com/fpd?_=1716283340214&yv=4670710&h=custommapposter.com
Preview:	..........<..n.0.D.(RT.N.9..q.!@m..,HTJ.r0...Q.....}M^..............<.WL....p..U-1...iZ.=.b.....VM...!..^.6-..O.\|.G..^Np.".....D..O.J.....(...A.}bj...&..`c^A5..K..~o..........t.K...,...Z.@.S#.[.C.y^.w..../98.j}.<3.w?%.;..K=.....Ew..>..0...Z.O..V[..M.....X...+......\.w.9f....}.8...P.q..\|]F..=.................

Chrome Cache Entry: 502

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23505
Entropy (8bit):	5.497827710939887
Encrypted:	false
SSDEEP:	384:kM/aDTs8RJbt81z0xObdLZNjsoSoX/KPH7T3BZJ7rL2TeWNrpKyzy4dYlkWyv7SX:J/aXsMJt8x+SdLZNQtoX/KPH71vrL2T8
MD5:	D04FDDAF27E3A0A7AD787C1751063C28
SHA1:	CD7603D51F4570AF7C17E15DF123DC2F7B729581
SHA-256:	7AD6DA96F121321C0902F93C186674D9CE01D6E3B667A829EDBB31F65C3C4C36
SHA-512:	47C48B71F5B5B2559DFDDFF9BC9DD46EED23247FE3162559DA1628778819664A102D2C8EEE3387B7DF7AF211610CFAC41772EFCEA98BA4E8E3894B8D749A5F5D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240516/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 504

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2776), with no line terminators
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	5.123321516846334
Encrypted:	false
SSDEEP:	48:IzAyUQu3mu3zYIXGb7VEUfUMnjjpeXNaY9sg694xU7zDm7vmpFjd83KvJsSVHrgm:G1ULkEwnjVeXNaY92CU7zK7OpFj63XSj
MD5:	A3A9A9EE8E72DB69D54E805F0586C651
SHA1:	9423B498B1B19136B84D704924324D3A805965AA
SHA-256:	72E960BAA80EC819264A604F2F8A8E5C21F81B785EBC17595211AD170D8B1BDC
SHA-512:	EE97AC661082B66013EDBFF75C1A7AAC9224F696409687A9599968ACCAEA7C88731D84662385B411DA595A0D510F50B40066EB283C9BBC4F1DD6CFE8516267F1
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.uidapi.com/uid2SecureSignal.js
Preview:	(()=>{"use strict";({551:function(i,e){var n=this&&this.__awaiter\|\|function(i,e,n,o){return new(n\|\|(n=Promise))((function(r,t){function d(i){try{c(o.next(i))}catch(i){t(i)}}function g(i){try{c(o.throw(i))}catch(i){t(i)}}function c(i){var e;i.done?r(i.value):(e=i.value,e instanceof n?e:new n((function(i){i(e)}))).then(d,g)}c((o=o.apply(i,e\|\|[])).next())}))};Object.defineProperty(e,"__esModule",{value:!0}),e.getUid2AdvertisingTokenWithRetry=e.__uid2SSProviderScriptLoad=e.Uid2SecureSignalProvider=void 0;class o{constructor(i=!1){this.registerSecureSignalProvider=()=>{const i=this.retrieveAdvertisingTokenHandler();i?(window.googletag=window.googletag\|\|{cmd:[]},window.googletag.secureSignalProviders=window.googletag.secureSignalProviders\|\|[],window.googletag.secureSignalProviders.push({id:"uidapi.com",collectorFunction:()=>n(this,void 0,void 0,(function*(){this.logging("collectorFunction invoked");const e=yield t(i);return this.logging(`collectorFunction pushes: ${e}`),e}))})):console.warn(

Chrome Cache Entry: 505

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10699)
Category:	downloaded
Size (bytes):	184092
Entropy (8bit):	4.950441666628239
Encrypted:	false
SSDEEP:	1536:TeP5HnbFRRVa5racUz8z6AZTAB0YbZ3EjVE2xoG+sjq6Cnak36UYxKEyL:yPp5RRgLUz8xTAB0KZ4X26oakIy
MD5:	C3A0AEDAC04890FCDB69065252D16809
SHA1:	D5A067D5605155200369FCC93F7723C93099598E
SHA-256:	BDF54CD1CA753FDB99CF1C8B8FAC1F541A118C1BD109D92B30EB8669200CDF38
SHA-512:	5ED7F97DD8E4D769E75DA8150F3F810E72FB35B4A007B5327C17FFC892226E0123F2BEE9C64C401DE2944FD97AC6E83A3BC3E37390142607DA83776C5A17AE22
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/article/top/926
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<meta name="csrf-token" content="LC2faQUrMADMhQLPY2pCNBdZXZF9SytqB63iCulU">. <meta name="robots" content="noindex, nofollow">.<meta name="msvalidate.01" content="77BC9EC2757BFFD6B08AB6E9830867E2" />.<meta name="msvalidate.01" content="8F0A17F8B7EE136DC522E193ADA44AC2" />.<meta name="msvalidate.01" content="81E0B92D870F20A5A81469EF8E834B59" />.<meta name="msvalidate.01" content="B3D56BE8396E01BC4B5FF1FADDBFEBAC" />.<meta name="msvalidate.01" content="6CF243145B598540D3EBE639EC0CED69" />.<meta name="msvalidate.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" />.<meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" />.<meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" />.<meta name="msvalidate.01" content="58D49F2458FE6C8E642907D29D522720" />.<meta name="msvalidate.01" content="851D73C3284A97030F2B09FDECBB3AD4" />.<meta name="msv

Chrome Cache Entry: 506

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32737)
Category:	downloaded
Size (bytes):	127045
Entropy (8bit):	5.282346229789818
Encrypted:	false
SSDEEP:	3072:fUmN8LbsM/EmTqmbKPbKzk0ujyVgJbPSPyJOjHKlVzM0ys16c:fUmN8LbsM/EmTqmbKPbKI8jHKlVzWc
MD5:	28E36B0D3EDC795D06855558A03A9FC0
SHA1:	EAE55A11C7FAFE59BBEEA51A94835396F6706F55
SHA-256:	9390159FF2FCA536463924AF0DE7C09313ECFD8E4AD614F1A5C7F4FD49B15D3D
SHA-512:	DF7E4E9CBA67857F993ECFCF99113A7A7CED4A9A4F97B8A190551A6053AA235D1546900495F32B3BF63D40B3BB56720804026F0DA97C2191568B308A126ADBAA
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-05-06T12:31:35Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"EN5e016830178d4b9c86161a54a8f919f2",stage:"production"},dataElements:{"digitalDataLayer.page.pageInfo.referringURL":{defaultValue:"",modulePath:"fm-sbb-dlc/src/lib/dataElements/glyphDataElement.js",settings:{value:"page.pageInfo.referringURL",callback:function(){},doCustomCode:!1,convertToString:!1}},"digitalDataLayer.page.pageInfo.desusertionURI":{defaultValue:"",modulePath:"fm-sbb-dlc/src/lib/dataElements/glyphDataElement.js",settings:{value:"page.pageInfo.desusertionURI",callback:function(e){return e},doCustomCode:!0,convertToString:!1}},"digitalDataLayer.page.pageInfo.desusertionURL":{defaultValue:"",modulePath:"fm-sbb-dlc/src/lib/dataElements/glyphDataElement.js",sett

Chrome Cache Entry: 507

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	18651
Entropy (8bit):	7.987670860997943
Encrypted:	false
SSDEEP:	384:fIHKF5J+hBrY1sBdlVUOH7S/des27FrAua8EWYLaCa4OKd:QHwL+hBrY1ofyWy727FrbaeEpd
MD5:	F8AAC768977E8322C5F0B76E2CAF26A9
SHA1:	B42FFFB161C6CAF3AA4B2C37542CCD869F10E777
SHA-256:	245747A04B8BE154247AB08BCEB17CDE904C98C363FFF5AEA018DFE273D5A8D9
SHA-512:	CB8C1ECA64BDC08202E36659C5E14AFD45896FEB570F027EA0AD06062DD2DE3E851D306B98105000B18963A08A6013C5B31E7A37B902C3B8B7E3A6D9E42EA14A
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=522793913156512&correlator=2222904734539342&eid=31079956%2C31083632%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=2&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339731&lmt=1716105411&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&vis=2&psz=728x-1&msz=728x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283340&ga_hid=421100937&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283332631&idt=6344&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D2%26monu%3D728x90_B2%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_bottom%26allowNative%3Dfalse%26bidder_responseTime%3Dconsumable_1200%26auction_id%3D3171ef18-089c-46a2-87a5-4524be840806%26monu_df%3D0.73%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.73%26hb_size%3D728x90%26hb_adid%3D130383330c88c33e%26hb_bidder%3Dconsumable%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dconsumable_chrome_0.73%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3Dundefined%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=313124495&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.#.....z.*R.z.......................5.....[...^.v..4...=Z..,..l..o..o..e....5\&%.....@.....a.Q...rNo......L.~w..Y'...,_......l_..oje.Mr.?c3y......3..\|........n.....&@V..A..9...L5@.. .C..3w~N5Fnf..1..D..F..O.)J...............he.1,.o..i.9.`..h..?.c.z.~-)T$.%?\|.h.>..Xr..CB..4gc.5....G.+.y....Y.....c..,8Z.....wo.........N........9...M..rV...I......h~.HE.\.....j..d~..f..]wvxh......;...s...S..uW}........^#......k....>/~..V.......n.....8\|.....A.m........?W....c5....#.\\|\|...6.._.....A..M.......,....2{..........`.l=.a.<#N.`MQ_...+8..2Q..}.j...I.t4?...E.$ N.l..\|..I.Wv9H.l..T.........H...+o5....&.K...O..W.`...H..k..3;<Z,V....fM_1k.Pb..,Ey..{O.i.j..Z.2<..f....Ns.0....^x8.....l...rXm..Sw......g.{......Srz.....w.u..-t._9}.8&.....E...}...j.}r.v..........8.t&o..."+l.9g[.k;....r........a.HY9....!.c..{\..r...../W.^}8{}MR...a'......^..<^dL.NTbRS..h.W.+..._.G.zDP......P...1Fn8J.......`... .B......GG..U..7....A....z...=.A..l.K.q.F..B.xxb.4+...{......,c...

Chrome Cache Entry: 508

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=b.r&u=c992f38f-79ee-483b-a206-98cc8db521aa&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 509

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/fonts/icomoon/icomoon.ttf?7m5yri
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 510

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKo1:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeN
MD5:	F30E31956400B4365B09FAF220727AD1
SHA1:	8454312E6CF1D0EE4384D3173F7F25FDEB65EE08
SHA-256:	AF264522911600F69E8C50B3DCCBE15E2C9DDF04F047F372F648C2FFE7DAAB85
SHA-512:	8CCE00FAAA076A7D0231D1758B773F05CA44EAFE1A120227538AB678F66E8E26A68CFD3EBCD00AEE500E29AADA5B9ADFE5B2CA4DE7B2E25B345EB4355EFA3921
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=6&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"6"})

Chrome Cache Entry: 511

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307513966750114
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcun9LuJ4vV/:T8wAD5ABwXw+krfflyxzx2n9D/
MD5:	0B240EFAA8D49BE60806096CA5B0CA04
SHA1:	6C0B504ACE45134621201B82F0F53D77B0354678
SHA-256:	6A2F825BEB3B540A044CDB0515177C34497AA2CE92E335BF1498FA42BB5BAF88
SHA-512:	C63A6F81AC9B7B99506BDF7433F2B1A25D1F023C6277046D89A7F1F82E1DA937B89DF2F8B519534F717BD87C2F186E7CE9E5D0106103667B0FDA87C81FC40A56
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 512

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1610)
Category:	downloaded
Size (bytes):	83514
Entropy (8bit):	5.2759898171576785
Encrypted:	false
SSDEEP:	1536:3ePI25d/FeS4XaNw7ydyBAV1j5W9wUnpsD/yhJI+6rTVfmzSvT7Y940Rh8lI8IWl:uPh
MD5:	2B6AEFFDB7702B08F0956098F45E5D7F
SHA1:	DDF3057605823C7B8DD387046251A9E877B0EE17
SHA-256:	218A7948AE384C388EFF35B82888BDD0371026B332D7B9DC984B38CC256933E6
SHA-512:	330109FD8EFF7B74141397C04931C4B37232922E5D3BA0D730BF75574D5831AE993049948027EEA66A65F1AF0037DBFA95480A8F3391CD7D1E1BB52CDE251B2A
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">.<meta name="viewport" content="width=device-width, initial-scale=1">.<meta name="csrf-token" content="amXeKisPOc6YSZ6JNb8ut7EOR8ezO7s4L8b4Bl66">. <meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1">.<meta name="msvalidate.01" content="77BC9EC2757BFFD6B08AB6E9830867E2" />.<meta name="msvalidate.01" content="8F0A17F8B7EE136DC522E193ADA44AC2" />.<meta name="msvalidate.01" content="81E0B92D870F20A5A81469EF8E834B59" />.<meta name="msvalidate.01" content="B3D56BE8396E01BC4B5FF1FADDBFEBAC" />.<meta name="msvalidate.01" content="6CF243145B598540D3EBE639EC0CED69" />.<meta name="msvalidate.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" />.<meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" />.<meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" />.<meta name="msvalidate.01" content="58D49F2458FE6C8E642907D29D522720" />.<meta name="msvalidate.01" co

Chrome Cache Entry: 513

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 514

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51763)
Category:	downloaded
Size (bytes):	51764
Entropy (8bit):	5.178178369800504
Encrypted:	false
SSDEEP:	384:PJkChn3vhYR7FZTeIyB3GdGzRNGY3pxDxMKelP/i/hAv+dyCtIe:C4f6PyB3V+vmT
MD5:	D37321569CBA76B1FCD8493690256610
SHA1:	0BC0DD5FAAABE4AA8721E6D67D985C93DB8A5D21
SHA-256:	A12D84EA3040A994B268B8E59BBF9451AF1CFE92D6F7EE6F7F5DA97A41F4B2E2
SHA-512:	741844B713B01F9A3FADEF9A3C9DA34D78EBE8E7D0A1852E35C5FC8FAC4758E83B55BA491F8F97B77A31832D717706106532FFAC8BACB65F78BB62EAB2087792
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/static-res/css/newsike.css?id=d37321569cba76b1fcd8
Preview:	/! tailwindcss v2.2.7 \| MIT License \| https://tailwindcss.com//! modern-normalize v1.1.0 \| MIT License \| https://github.com/sindresorhus/modern-normalize /html{-webkit-text-size-adjust:100%;line-height:1.15;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{font-family:system-ui,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji;margin:0}hr{color:inherit;height:0}abbr[title]{-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Consolas,Liberation Mono,Menlo,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearanc

Chrome Cache Entry: 515

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=p.f.i&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Fsearch-article%22%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 516

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.010831797345906
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoer:8DIGoXbfCYKpEeYlywuqIQWOer
MD5:	6E022843772089B54B576FFE02D4C805
SHA1:	21438D792DBD60CA6F5A0BDADA06ECDAB019F5F0
SHA-256:	D5C0E5CF5FD0FCDAB3E893DED23CD0ED3AF51861E5440ABF131655D3049FCBBC
SHA-512:	A9406A051E85144A811F45B2D76E1EB3ECAB4536269EFFD072F26211C78FEAED44FF3A752889F8226AE4BC67B70EEEEE1FC85F07076E5D5E40F981FB2BE18E11
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=15&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"15"})

Chrome Cache Entry: 517

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 518

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7bde16b5-414f-4c99-b45a-259240a801e0
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 519

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=54676881&p=156972&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 520

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4351
Entropy (8bit):	5.008594115851049
Encrypted:	false
SSDEEP:	96:OpyIo40wyB0fDv+OimCVKxYa6Ay2vfVjujrjJjeW1hwWIF:QXmgmOimT6vaF6fJZU
MD5:	6456887AEA1D94C9F9058726FA22ACDF
SHA1:	1C632228B715DF88130335342D28518F8E92147A
SHA-256:	8559F309F71A400868CFB4A1ADCDC9AF1754E4237CEA0947562E2B5F5465A4AA
SHA-512:	EB02FB6FE89676FF829B717490F276A2E42F7462F932B5B398332004E993E6DCF3113900BA2B28C99489FD1B07F95EEF0D3F0982EEB6AB3E53E3336943D29EAA
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f/e91f4b90-f9aa-4ace-891b-96dd07595d9f.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"e91f4b90-f9aa-4ace-891b-96dd07595d9f","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"5110be45-f188-4259-b399-086eddac6e56","Name":"GDPR CH-Traffic (Opt-In)","Countries":["ch"],"States":{},"LanguageSwitcherPlaceholder":{"default":"de-CH","fr-CH":"fr-CH","en-CH":"en-CH","it-CH":"it-CH"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template SwissPass","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"ba92dbb5-02d7-443f-8481-b67e4427328b","

Chrome Cache Entry: 521

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 522

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeX:8DIGoXbfCYKpgrlywuqIQWOeX
MD5:	500562A68030EEC4C03BC133070D9C0B
SHA1:	9C8C2EA2056766161C0958931A3662B85056BE2A
SHA-256:	5A5B947C1FC029EAE511B440972A8D575E6D0E99E547B2BEE2219CA11CC78A19
SHA-512:	9A3DCF23DA09BBCA43D8D310FD2DEB65CC89581947701F6AC9D6923C74296A9E35AC3B4C7CA9A09F2AA5FBABB179618228A5E47737460612D68980F4D4BC0DAD
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=0&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 523

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=7660f095-8567-4e13-b266-ede79c1f7a19
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 524

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 525

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	459
Entropy (8bit):	7.5318121792989015
Encrypted:	false
SSDEEP:	12:DC4fFnrKZo6wzhN0F2mABTetoHV1MTai16KK:DCAFnePwUnCgoHS1W
MD5:	9A91DDD1EF78D26522AB240788DD7510
SHA1:	FC1B5D17FE00EB9AF1B59A72C3D110AD6BFD0F7C
SHA-256:	9B33862472D542B18F966A3858C7EC2AB56D6EEA6B82724CADA77CAB50F237E4
SHA-512:	DA4EAC31FE529A018749713F2226E809C045BFED0A1ADAA5D1C9663B36FE49369BAA79A5AB8E50986DF3C1EC8E0F8B13CAE242E20B349C93987164D674975381
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=121473762140253&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDW.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&ists=1&fas=8&fsapi=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342221&lmt=1715994881&adxs=-9&adys=-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=sesspv_refresh%3D0_0%26refresh_count%3D0%26pos%3D1%26tabVisibilityState%3Dvisible&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse&adks=4031254382&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....^7..2.nN~.......5.... .l......ta...r..tY.kn..jh.<2x.</\| .0KSt..V+e&..............F\..........18..x......>`.....z...mv..h.Q......; .U...q9N...>>.;Y....\|\|:..o.T.6..eS.t........R.,z6...............+:R@`......V.?_.e..B@pv.......n.'!...;..:.;q.....j&.C.]...`A......J......."n..X.0.B..c.Ux.m.6nB.;"P............6'.N.....%.`..Qa>'*#S.(.9.../...-mY..hb.~m..'..5...HN....'.E.......kG3.....9S.."_...m..e.......Z.K..].z....(..3w...2..\|..d.

Chrome Cache Entry: 526

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1914)
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.595477203583145
Encrypted:	false
SSDEEP:	96:eGZa44XCUq3ymv/YTW+sEn4xSqwadzuPxxLCpM:Lg4zUVoi94Aq0Ll
MD5:	E43B3F09EB323B895171E120791C2538
SHA1:	F44CC17A7110E2453C2FF9A250C0F27206203D5B
SHA-256:	CBA2CA327F62479DEC10ED7A52A1785154530F869E92AAC500528F7E7924C746
SHA-512:	5A0C55666812999A10A93C413773BBE9B45AF245D8E46AB84ABFBF69BBBB62F82D0B8C275FFBC72920F07C752D2D2BE895736B4E60BE0C566CB8A1F870E4D239
Malicious:	false
Reputation:	low
URL:	https://app.grow.me/iframe-login?siteId=U2l0ZTo3NTI4MzhlYS05MGI4LTRiMGMtYTQyNC0wNzI3YWJiMGIyMGI%3D&callback=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926
Preview:	<!DOCTYPE html><html><body><script>(()=>{var C="https://api.grow.me",I="grow-me-iframe-prod",c={BACKEND_BASE_URL:C,SNOWPLOW_TRACKER_NAMESPACE:I};function r(e){let n=document.cookie.match(`(^\|;)\\s${e}\\s=\\s([^;]+)`);return n?n.pop():""}function u(e){return new Date(Date.now()+Number(e)1e3).toUTCString()}var g="grow_unverified_reader_id",y="growme_has_logged_in",E="grow_check_third_party_cookie_support",l=window.location.hostname.split(".").slice(-2).join(".");l!=="localhost"&&(l=`.${l}`);function f({name:e,value:n}){let o=new Date;o.setTime(o.getTime()+15778463e4);let t=[`${e}=${n}`,`Domain=${l}`,"Path=/","SameSite=None","Secure",`Expires=${o.toUTCString()}`].filter(Boolean).join("; ");document.cookie=t}async function O(e,n){let{SNOWPLOW_COLLECTOR_URL:o,SNOWPLOW_APP_ID:t,SNOWPLOW_TRACKER_NAMESPACE:i}=n;try{await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({schema:"iglu:com.snowplowanalytics.snowplow/payload_data/

Chrome Cache Entry: 527

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 529

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	18609
Entropy (8bit):	7.986568493603649
Encrypted:	false
SSDEEP:	384:aJMqI3UGmmIq6by69LL/Rq6gxlrHn8gxcg2+1/1tegt23k0oX/psCTb:aGB/m7LIXbcTO/2TGX/K0b
MD5:	CA5823373DCA9892A9C16B62BF05ED32
SHA1:	D2F48593D331AE0D20EF6F53FB76111C6CCD8A2A
SHA-256:	21AE34B371292F002FC835E4B3941B2D4B7744E97CE32B389C567C2D01924B88
SHA-512:	3D38AFE7C984E98AF951BE426C69FE24185C365616DF371CA06B21FCB3F2BB9A66D743C8A54E863F25B3472139004B14E959D35B5B04894B2174E092BA7AE25D
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=3582981463819509&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDH.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=18&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283335098&lmt=1715994881&adxs=116&adys=864&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=f&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=728x0&msz=728x0&fws=0&ohw=0&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D1%26monu%3D728x90_A1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3DappnexusAst_2100%26auction_id%3D8517cf56-c9c6-4a0b-b76d-6f64634ec31e%26monu_df%3D0.20%26safeframe%3Dtrue%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.20%26hb_size%3D728x90%26hb_adid%3D465cebd0d26981b9%26hb_bidder%3DappnexusAst%26lastRefreshEmpty%3Dtrue%26refresh_count%3D1%26lre_rc%3Dtrue_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3DappnexusAst_chrome_0.20%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3636551459&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.(.3......HM..P..1n._...U`.n.u\..O.\..../.v...B .Q).<..v..+r.O-..K.......}oV...?B.0...(.8L..>.e.QfM..l{..}.i}.....J.dK.S@%....Q.H.0.....~..}\|..QI.. .q/.]%M.TK....i7.....79H.L>s.H....}..7..........U 9.j.@..o3T.......$.8...Tc.f$...3...1&......E...ds.d...Z..T..j(.M...3...h.D..l..~..b....f..Yt..._......mL.......ls.VC..6..M.w..`C...w6.........}.....;$aLla....._d..!.....l.Ov....;...W1.g{.....7..R....P.2..$9...:o.........o.....;=>mf...._....u.,.=.8...v~..qk.}...;no_v?.......?.......W...A.....co.>.._'g.._.W...f.C.uQ.j}.W.....3.I2..........v#.....o.....O..^...........p.?v...U.V......q.ZL.c......\|....u.....A.J-..-&-d^....&$!7.6...{..`...Zk.....?....l.E.{&...z..3..MV.........J......v...<...yV....v..QS..L....3.m..{Pe..c{:...L'...>7.;...rp.........U._1.lY...X...n_.&..6...;%.R..z.s...1.Km..Os......&.o}.[....ev.UVt?.B..6.n..V.br\|.........{..L...5..../c..+..<..T,c....@...])..Z8HP..t..c2\|A.}l..C;.../........S?`\%..vw.www..!..E...X.a.R.f..{"..

Chrome Cache Entry: 530

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/ch/104c5/loader-20200819.png
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 531

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 532

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 99324
Category:	downloaded
Size (bytes):	36607
Entropy (8bit):	7.9904057208307195
Encrypted:	true
SSDEEP:	768:G8wveVrqaq4179g3fFiYXfaQ5Wt+r2vcEjWbVfCpejerqN:NweRqh4Pg3tiupSC6cEjYfC8jerqN
MD5:	5739463FFDDDC3A215CECE34D01B4BF5
SHA1:	0358896871A259D6D109B3C71E71B9A3F03A3C32
SHA-256:	04EE64A5CCBEE82922F52676A05E2B7710CC25767D61CF478DA10AC8F6D0667B
SHA-512:	5906F42DE010E8ABC70AE49EC02B83DA61F55AA17EBB08A0FBFFC147645B91EA4B8F3C37767803A088F83A3713601FEA65766003DECEE05D20A7C169023C8F61
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/ch/104c5/js/swisspass.min-20200819.js.download
Preview:	............s.8.%.W$.F.F.R.~D.d2=Y..n...5...o.D^.(C....t...{AR.e..U...d.E.>.=.j..e..G....ok..wV..h...W.m..#...p....m.U..3...BcK..Q...ad3....L..D...G...N./d..D.....[.oN.ki......[....../......ma......J:.....a.....`.T.....f..]G....:'.R.+.X..H..>..9.!.@......H.r"..tB..2.G..c..qa`.y..b.x..;.&...?..0.v.......P;3.....N..._..#c.hekS......B2jG....G.jY.xv....EP>3..Q.......8z'u..TuA.mK...r-...._.Q....%hX...).F.,;F....X@YbD@..d;.......C(.~....6...@(-j...A.......'.-!..f...P.v..=rb.qax...p?.Nh.f..Z..w;..xx.....xao...K.kZO".^..@..gK.XI....Uw..?..u#me...]..].......nk...}.....my....%..5."....5.k.....o...O...Sbe"%uE.9..}..o<x...x"..jW.h`.p...k._?PSk........h.0......W.z.....R \|.U@...e...C....l..ixm....e.f3vgU1Z....^......kW3?.N..1.../.L.{.6qK..v7..:.Tx...F.....#....&....7^pd<..q##&..].....~.H.Q.j1..A...xo~r....O..SY.67).O6.~.@Cq..F.P...r.].Vs.2.e.&7{.}...V.=.......<....rS.....A......1.3..t......x.\|..T....a....V2...a...)F. .KF.l.G....KA{...Z..."k..t.t.....X.[.

Chrome Cache Entry: 533

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 534

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 535

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	185
Entropy (8bit):	5.051558046268956
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hyXaMtqMrZOAYPqQyKd:8WiIUemo/HPbfCYKpY4DCVeCwuqMr1Yl
MD5:	87A80B9A81A4E9534661B0084B5C5F80
SHA1:	6327A265007F7DB35B3527F1635E6B4AEE6DA962
SHA-256:	6D412AB4F0D308D11427669E7CF53E93BC6C260ADDB1E68F91857531F879561B
SHA-512:	87F69AA6CEB3BDDDD0E4A6BC0EBA85923976C42C3F8778D4EAE8689B8CC2D8B48B81EDC8C0848EBB1DD51245503E37BB6664545689B4633BA9BDEE366E5B1355
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=18&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"18"})

Chrome Cache Entry: 536

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=i.r&u=KJI01M&d=%7B%22auPath%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDW.A%22%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 537

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=b.r&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377&d=%7B%22utm%22%3A%7B%7D%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 538

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.5251270918749356
Encrypted:	false
SSDEEP:	3:n9m6QiFL4:nVm
MD5:	B205296F7C49C67BAF5B78E8163061A7
SHA1:	828DED5C881601F44CE02CCB9E8B98D214B5E9AA
SHA-256:	281A6CECFF9B473286243BDC58329C1D8141B979E8985EA968D7D975F3A50E05
SHA-512:	ABBB243E84448F153F337C61919C36F68F2503F14F7301A903ED76B5A321C60C09C5E5D1174E77EBE3199A1F7A900A0668555B729F008547DD26A00937FF7B5B
Malicious:	false
Reputation:	low
Preview:	partner parameter must not be null

Chrome Cache Entry: 539

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.5629395438375875
Encrypted:	false
SSDEEP:	3:McNM9F0ffrVyzHz91iNS/6bB8tfrC+cGdkALcp7FJKnPDSSaln:L8Offszx1iNWwKJr33ovEnPWSal
MD5:	476084BB507FA2897887CA88DDFFF967
SHA1:	2999827C48B980713AC7C02A925C77FF1D7E6A2E
SHA-256:	AC350709C33D49DD2F8A63936D99F66ACFD1192F25FC1F1D04C0739399848857
SHA-512:	230E803AD93931108D33323C2AC10DF8C11248833D98940B40C362292D3C09D06762F4C168CE682344CD2ADB9120737304BE4F9F6E3B9A96847D70513878B851
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=522793913156512&correlator=3437617772670221&eid=31079956%2C31083632%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDH.C&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=5&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283339746&lmt=1716105411&adxs=268&adys=45&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&vis=2&psz=728x0&msz=728x0&fws=0&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283340&ga_hid=421100937&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283332631&idt=6344&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D3%26monu%3D728x90_A3%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_header%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_600%26auction_id%3De48b11d8-4fad-4dca-802b-1fae7af34062%26monu_df%3D0.08%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.08%26hb_size%3D728x90%26hb_adid%3D131122f2fee6ee48%26hb_bidder%3Dkueezrtb%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dhidden%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.08%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse&cust_params=page_num%3Dundefined%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3029960922&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....y..xyr3^...8D.X.Qj..0....c:...j\|..."3Q..\...m...w...d...!Kj,...Y.`.~....]w.......c....I.;..+x{.t...m.-.l...^.,.hy.RZ........

Chrome Cache Entry: 540

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 97364
Category:	downloaded
Size (bytes):	42955
Entropy (8bit):	7.991493896729974
Encrypted:	true
SSDEEP:	768:Rtu+4qfabjBSDE8qENv6vSNlGWCZKOtiY24C031E3Bcw4hKcZj0/6zjAzxiuJGCx:HuOEcEGNISH2KOtn24C07w4HZj0/bpJ9
MD5:	E51D1F1CE1603A0FCA975ACA51BBFA18
SHA1:	4B014A258E869270976301D2B1DE781DAD983A33
SHA-256:	4A4AF7783065C0F8BD8A843225BF8DA166B99A269F1F8A8871195A8C9089C1B4
SHA-512:	5C6D62676807427D8CFDDCC9996E847E0B1E640C7B31525ECD29F66A25283D04551E99391864AB60194A8E1BA322B62097B10300F37CDF11D5DFBE1D8D12B7FA
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/ch/104c5/js/jquery-20200819.js.download
Preview:	............k{...%... ..tU...v...].#..c'.n.R..<.......P.%..o?.p.E.;..9..../k..N.G..[C.0..;./....I...\|.)..<.....9y..........1..4.D..n.<...-..C.y8Z.j..m....}...Z._.pT..+..2....u...6..x.Bu\.Q......Kb..K.]'%T#1.$..M.c....]...e6.).q._b...&.(k<......qR....D9...:..K.2t..O2..,.c..b.......%\|.k.8:..e.E../..>o....R?..$...e.....1LdN.a.D./......Uu.........?..._.D......[~2%..._\|z.%.\|~X...^ .sQ....L.S....{\|.Y.]1$...Z.t3VA...X.Y.cw.t~V..a/.n.8R.)1..>..#K....t..rv.&....q.....\|...Q.B.ys..H..&+(#hS....ebo.\..>...;.......4......v.vF.E.\Z.n.. <Q.cC.L..E.(...(.m.......#."}..Qk..4..../5.[2.T.f.t.9p....j1.'bB...;.q...<.3..N..k...z.i.....U.Ou...F..K.J.\|XU...=4...8.....yf......Y.w$z3.......%...5...!"..<OAd.....<.E.M.yt.,.M&.Yy..AA]gNR}.pE..I....'./...O.t.....(.I.N.1'p4.R.K..l.T..S>.....9...m....C...H38.&\|V......I...,.......Q....{.........5..M.<Q.Y..M..`.h/...}!2......P>X...\|/t.&.".:%...@N..D.(K..A..w<cP.yy.a...f..f..a...yqh...8*. ZC.E..m.........g.......w

Chrome Cache Entry: 541

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (836)
Category:	downloaded
Size (bytes):	12823
Entropy (8bit):	5.737246917167107
Encrypted:	false
SSDEEP:	384:azEoXR+8XnCYVFrdbVT80GfK7ot7AfsEe7N:a4oh7lVp/80367Ak7N
MD5:	BF1B078E747BF3816B9F482A13D55ACB
SHA1:	1E33294E63728939D151353126DD169B905F110D
SHA-256:	407A567ABFABF78843C1DFE24457BB650325D8F93E9396A00CE686172756244F
SHA-512:	A821CF51951E15C8385EFDB15EDAE7E99808A3697C8FD66EF45B7064C744591CEF4138CA685D7A5029188FD51357E6693F163221220265145FB69145EDA66B70
Malicious:	false
Reputation:	low
URL:	https://live.primis.tech/main/js/deflate.min.js
Preview:	/*. @license. * zlib.js. * JavaScript Zlib Library. * https://github.com/imaya/zlib.js. . The MIT License. . Copyright (c) 2012 imaya. . Permission is hereby granted, free of charge, to any person obtaining a copy. * of this software and associated documentation files (the "Software"), to deal. * in the Software without restriction, including without limitation the rights. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the Software is. * furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in. * all copies or substantial portions of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. * AUTHORS OR COPYRIGHT HOLDERS

Chrome Cache Entry: 542

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	411
Entropy (8bit):	3.7191268485301876
Encrypted:	false
SSDEEP:	3:YMVFt+KpJHJjLTDobNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5MJtTUU9spkut0JLQ4:YKHjzozz/iJlUU6twksr3
MD5:	4D70D713D96BD4BEF73B6C8746714B2A
SHA1:	87D358327EE1E56B88835E0A90E76BABFE91965E
SHA-256:	C5551D396FC0FC3434DB9F7C44C870B87D40D648941F17467252E93E85D9BB88
SHA-512:	25FDEAAE1E710389095D4F592B952283192EF8CEC3372F12876A9B80FFCDED6ABEB75B76C2061EB3953A1392C3357E03F76B79E7672F2453F246F84544486394
Malicious:	false
Reputation:	low
Preview:	{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CJ2C5cq1noYDFTKwgwcddLAKHw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"9",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 543

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21941), with no line terminators
Category:	downloaded
Size (bytes):	21941
Entropy (8bit):	5.28962209309382
Encrypted:	false
SSDEEP:	384:Bcw09skLa4cgwcyYJX5vBvEl6x8etVjFHFnvT0lBVM3PM8sbkSzt9PzHIxNjh6:2ZPfcfTYzvB2etVjFlvT0lBK3PM8sbJJ
MD5:	2E2993CB3D75BB3492B17C28FF9D766C
SHA1:	3B4DA5750BBEB409CBE3414D3189919F1DAF14FE
SHA-256:	AF284FA768787FBB6B7EFB8B20E162FC80630596797D1F32BC7CDC34BFCC564E
SHA-512:	BDFB9628C4563586E4075418DC8AD64984874FA56D4A2724F949DD2B63B1A8E3BF1B9387235596152EFF3D2867910F4F54E30F4B1F4C1640EDC08FA7A850A873
Malicious:	false
Reputation:	low
URL:	https://custommapposter.com/static-res/js/newsike.js?id=2e2993cb3d75bb3492b1
Preview:	(()=>{var t={7757:(t,e,n)=>{t.exports=n(5666)},435:(t,e)=>{"use strict";var n=function(){function t(){this.bannerIds=["AdHeader","AdContainer","AD_Top","homead","ad-lead"],this.init()}return t.prototype.init=function(){var t=document.createElement("div");t.innerHTML=this.generatesBannersString(),document.body.appendChild(t)},t.prototype.detect=function(){var t=this;return!this.bannerIds.every((function(e){return t.checkVisibility(e)}))},t.prototype.generatesBannersString=function(){return this.bannerIds.map((function(t){return'<div id="'+t+'"></div>'})).join("")},t.prototype.checkVisibility=function(t){var e=document.querySelector("#"+t);return e?e.offsetParent:null},t}();e.ZP=new n},4408:function(t,e){!function(t){"use strict";function e(t,e,n,r){return new(n=n\|\|Promise)((function(o,a){function i(t){try{c(r.next(t))}catch(t){a(t)}}function s(t){try{c(r.throw(t))}catch(t){a(t)}}function c(t){var e;t.done?o(t.value):((e=t.value)instanceof n?e:new n((function(t){t(e)}))).then(i,s)}c((r=r

Chrome Cache Entry: 544

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 545

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.97177460040716
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoenM:8DIGoXbfCYKpgrlywuqIQWOeM
MD5:	64F8E13218319CA6A9A5CFF567D5E339
SHA1:	24697A44FFFE9ACB1FEC0601B22FCCC2C1A2CBC5
SHA-256:	74332A01755365C1B86AFCD5273F59CC9FCB374660075C5EAD8AE09B7A226B9E
SHA-512:	A4D0A8AD415877DDD09C422D264FBE0D9F944761CA521DCC6CBEDA926DCFC9CC592D210A13F6EEB81F1BFD70B493D08240C0AE38D5735B75738F17E1809A22CF
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 546

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 68506
Category:	downloaded
Size (bytes):	14645
Entropy (8bit):	7.978444508686695
Encrypted:	false
SSDEEP:	384:gYNj0uwB4CxnmbTOTiLG9uTOhS9wN7ANVHDJ7fPbMb9/Exn:Bp0rBRRmuIG9uTOhSWpAzDJ7fPAIn
MD5:	118438750E00CEAA755F957162192FF9
SHA1:	1F2894D472C27B42A9706C691C1B45B78FA87689
SHA-256:	05B158C833F9E9BEE0829439B18921B92AFEBDBE31C40329C503475749AF9347
SHA-512:	5E48F1F6B23BB56D89F0C5C4DC4DC07AE69653283862F1CE285CCB5713E40353185E1F03C513CD3C6F24DBD312068B3EABE0D32D55BFCD6FB16ABA32E443DA96
Malicious:	false
Reputation:	low
URL:	http://jaz.wxk.mybluehost.me/ch/104c5/
Preview:	...........r.v.F....Z..t.6.6.&..J..5.t..lIv.>.\.d.HV"..L.@[.s..<..?v...5$..".........;v...z.....H.R...O...$.....%JS..0!..I.0..I.u..Ih.3L.H.......pB+Kl/&BI..x..C)....L...-9..j.W....&....3.k.h..uC...2%..%.....N.1\.e.~.E..D+.....j$.}....\.X......w...sz.6...'.....E. o.....Qc.X.;m~...x.......[.9J.....':..E .V....Y.`'\|+4.4....1)8s0..I....F.k4..~mX...e.y..A&....}.]r.'B........$.!.S..M..D.....Q......3m...&.q....Y.J...=....{.&.?..I...4.$1@Nu .p......."..Kr...V......;..\AH.O8q.....Z..#...^2.%,..?JA..]..].0.86.%.K.~....."PR.1...Bbv/_....J..}m..s.y..<y..<..fR.r.h.^M..RX$.^Y....q....4cj...E!/..R.)Qt.u:...6.l8-1.e+.e.[..P...".h.Jx.........t.q.......\..s..4..~.n.v....I.a...`."..:>.)..~.........m.J.JpV...A.[T{...\KCO..l...4...)...<Ht\..D.'pF......=..5R...B.....>...ku=.....f.^.~=,.T6.n(.&.n..g......W..l., .......eh..x.L..S....K~....M-u0....(..X.!.f...0^.+\E.<....\.Q}....X*.~$L.....an.6..i..7......N+..... B..;D...pU.>.8...-..S..!.9.U.(\.K.A.Q...:....T'......

Chrome Cache Entry: 547

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.265319531114783
Encrypted:	false
SSDEEP:	3:YTyLSKwhpH0n4n:YWLSdhe4n
MD5:	9A607BA8723E0AD47060C66784B93ACE
SHA1:	BC570344A261BFADCF3CCAF12A92A3AC01842FDA
SHA-256:	85B4B58242116CE8841FFE38BDA08BA3A6C413C61F166AF208014C2650F5E900
SHA-512:	5930E6A50FE685ED0942ED45D0DC02C39723F38390A5E573335A10522EE5B75F7B9FE4945871F401E318E979313EDBBEA389535156C070D341255A58605BE75A
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/versions
Preview:	{"version":"7.254.0","betas":[]}

Chrome Cache Entry: 548

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	19626
Entropy (8bit):	7.990161032418321
Encrypted:	true
SSDEEP:	384:vHwErlZSJ9Dr6erZWPkYYFNKPupcM81s32VrLidRzRaKxkUFo3ZHP:o/9qKZ1YMNKPupcDtidR8KPed
MD5:	D373DC92C7AF79C2D2AF1EB63470D23D
SHA1:	951730C635FD1C5A21EC136589E07859D51B279F
SHA-256:	8D043F743FF163E4051DBB9DE4308553F1FDD122EDE1F80FA10FE3F9DABAFCB0
SHA-512:	93DE30DB11A24961695062CE7F00C3334F19BC2A32027E854C0B75E976873727901EC23850C0B1F32B31A1EFC8C89DF3AD3EEA8353A810A302A818325DB1B0E2
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=700096040245757&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.D&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C160x600%7C300x600&ifi=3&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342252&lmt=1715994881&adxs=803&adys=558&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D4%26monu%3D300x250-160x600-300x600_B4%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_1100%26auction_id%3D705f5610-e3ed-4759-9583-daec31c7e63c%26monu_df%3D0.22%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.22%26hb_size%3D160x600%26hb_adid%3D2058baf406af0808%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.22%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3801477003&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.H.3.....U.....:.c..............~...../......5..ynie.T.&g...".r.`..._m....f56..(..c.....2. C...f....?....Z+..Ur.Z..}..........2.;.L..4...X[..X.)..nK.{S+.n.\.....y.9.$.{............@.. Y..3.......m8j......8.Sqf..U.3.fV..Sg...L.].HA. .&........r....E..Y...z.j...@.V....JK.. r.ob2&.T.-.!....ac(.'.6u.Pp4..1+..RT......sbs../qg/.Lg..b.<XM.}....L.....$J.,....&.._.@.g....L...\|v.:..ga..rvx.Z.VA..Q..-.V.Hf...~.p.HK...=a.....~j...J...R._]\}..7O...._z..8...........T...ws.z....W......v.d.w..G..G...z....7./D...?..}.....x.3..f.6.......,..W..O18v.I...'....#-.v.3.D......o^..p..~...T.T.M:..9~.6/j .q.f;.........$......o5.....M.I..~.`....#.....:.t}[...9}.8..^[.l..P.}.Zl...].U...s.......,.7..}......-....y1u8.h.F.=..*.i..Vb...W6.....t...../..."..A.5.r}.y..P.=....!O.d.... .{..Rb....B>...l.Rj.U.,.p...4..\......+.S...S....s.,..+.z[...q...ho...N..\|.;&........2...9D8r8AJ'..x...(.#7..p,2......"c8I......z.D d$%t?....;...uKJ.c...A..m....f.\|.6U.....6.f.....tE8..eY..D

Chrome Cache Entry: 549

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeBM:8DIGoXbfCYKpgrlywuqIQWOe6
MD5:	2CC3A3ADB825E22693BBDF34D4CBABAC
SHA1:	5A5428B64D8BB0C8EA9D7ABF59777C3EFAAB319B
SHA-256:	AF46AD78AC993584D07515DF46A683E8AF4CF0D26BBF34EBF74E1D40F4A2ECF2
SHA-512:	FF3C1B46C24793D15450EECCE588854DB2E6791002399B4B26C3E68AEBD3CC04A2F2C6CA05F3C40EB33828EA11BFA80C1AC19E4655E2421B65627C1257FEBCF6
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=7&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"7"})

Chrome Cache Entry: 550

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	158
Entropy (8bit):	5.045981126503607
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hzztqMrZOAYCfBM:8WiIUemo/HPbfCYKpY4DowBZqMr1YCf6
MD5:	430E4248A6921F4BB370A650BA251780
SHA1:	AA9A52F80635CBB37C2C7A52435974109F8BDADF
SHA-256:	9F39CA9DC4F5A847549C7A389947CD4DBCB97E582D25A9644CAB4B10E61F4C60
SHA-512:	E57CBDD27153BF33278C48D158B83CD9DD54C222483EF82EC7AF88095999253711A815DF2D505181439FB6173FDF55920E72754981B7B3F817166D321D002905
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"7"})

Chrome Cache Entry: 551

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	23177
Entropy (8bit):	7.992050530622526
Encrypted:	true
SSDEEP:	384:z6rwO1BEzGtTmf4iB73gHAu5cdIuChd4jRzSvbCFIt7ShrqAxkq2bKj4BVD7OlGO:UBEzGtzW3gHAu5gkhORiCiirTkq2eUB8
MD5:	94A4380324613E30F98809604844E436
SHA1:	3BF19E37EE19FAA7701094D85CB2597D8FFF2050
SHA-256:	C43D8E9EE5FE631011D02D52320AE3A831F0EEFE5AAE19F123B0337CA349EDAA
SHA-512:	26EE45F208DF2FC232BA5E9F5A17F1D1F389075B03C84BE5618B9ED09AB886974CDF91E5051A77339C77FCA3AE828AAE3451643E50132F4124473EA2674A4C62
Malicious:	false
Reputation:	low
URL:	https://d27la2n6wh4qws.cloudfront.net/1.11.276/scripts.44fcffdf8fc05248.js
Preview:	....BD5..@.2.}....~....Eq...n=.. /R....[&..E..v..^.%.B.\.u...c....`.....D...4............A.n ..W.c.^.....6...Yx..K.K...Y.C.n..(=.......>.]P@...\|W].T..{k.......G.`.$..tf.....X5e.....,.G....yc..N....e.sxZ..Q.vjO'...,\....g......,...<..N..Y.........q..{........B.q`...V..{!I.M...O.H.97...t[....gQ..n..n.....P6....5d...<..M.Kk...X^`A...O.R..Z.....0.s.v..R..#o...E.ojV....n[...7K....U..8.l>z`..+..Q[A?.[!\|.L....U/....u.H....n[E`P.L..Cv.F.P.AH....... ....l8.?.I ...R....fU.......Z0.......j8....DDd...........8j.G.F..(<m.n&.6...UX.X.9.t..0.,.y..RU.e.........B.Kv.Y......iq..}/"...s.%9qNw.FQR."...$..?.........Bl..6.U..I>.w..2.8..iv..wO..=.K..ZN..8%0W.Jf.?.c..9E.w..}..0........c..;y.^6.L......>1.......F...... e....a+..%......K.c.........z..&.5..(.>.%Rsf.pw....)......&..B.!.+....U....K......O.lW.r.x.bg&..h#...[...l......,.......8..ag...k..j")RE..dF...y@..;..)..o.7.......kv._?%.X....2......"..-..g...#..[n..;.K....ji...). i..........OT=..w.?...

Chrome Cache Entry: 552

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45785
Entropy (8bit):	5.997444886146699
Encrypted:	false
SSDEEP:	768:TUJnbGgSoI8WxC71rzUoHZ4qs0wEAJk0TUVgOAaVCzlxUQWsQoSiomRzzII+dsS:wl10oVbC5xUQRQ4fS
MD5:	8A5CF75876F3A083F70C9CDB14DBCAEE
SHA1:	1142BCA7D05EA7CAF42ABCD624B7244612147D70
SHA-256:	3C3D91538BE7C845438ABB38AE670A679D7C1147A5854D87E194281AD3A91CB9
SHA-512:	59066E7867C011938F648EE1EE1384FF38E2B241AFE0D3FD407741E0A238E1384A6EB20D6ABC664850B352A0084E4E1F89F88AC7487C70B2129CCD178DCB4013
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=265694873715438&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=10&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283302600&lmt=1715994881&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=1&psz=728x-1&msz=728x-1&fws=512&ohw=0&psts=AOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbRIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D2%26monu%3D728x90_B2%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_bottom%26allowNative%3Dfalse%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue%26amznbid%3D2%26amznp%3D2&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=313124495&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	{"/20842576/KJI01M/KJI01M-DDA.B":["html",1,null,null,1,90,728,0,0,null,null,null,1,null,[138386434142],[6239183429],[4996874314],[3164252532],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA","CK2X-cW1noYDFVGWgwcd-LMC_A",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240516" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrmy"]">(function(){'use strict';/* Copyright The Closure Library Authors. S

Chrome Cache Entry: 553

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30
Entropy (8bit):	3.9483943455364026
Encrypted:	false
SSDEEP:	3:YH/XHfETmn:YPsS
MD5:	1C686A255150DDECFC5D91AF4B128B0B
SHA1:	A6767D4B4846B16A8A4BA9C2568E2AFFFC286992
SHA-256:	B04CD869CFD41A48C006458F71969A0EB26F33FEC12F3CFE00408F8B73BF3FF8
SHA-512:	4E0D278BC159F289FBE3BBE04D874A7120BEAF4E45F05B03A566D513C4CCC2905A4ADE05D3DD92B169F595D3DC5D03AEE982B0713970C21F9B5A65DC0B17AD6D
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/bounce
Preview:	{"bounce":{"setCookie":false}}

Chrome Cache Entry: 554

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 555

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://2a259ff2a1bbf1c711ae44c0a054e408.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 556

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17218), with no line terminators
Category:	downloaded
Size (bytes):	17218
Entropy (8bit):	5.266693053762656
Encrypted:	false
SSDEEP:	384:C3cnVvrPjVbTOV28zq7xxk64qTxrqsorajY3sjGHWq+9uT3r/yhKIuFYtiFO05AU:+qrV3OcEq3N4wxrqsm+Y3KGHs9uTzyhO
MD5:	92372AB5063270A877A9EA52017C9654
SHA1:	339C26E0F34DE5497B1614704E77DC6747087301
SHA-256:	6149F1372190ECB81835FF168BA4E436940DECA497565236C3D75FD6607D0F06
SHA-512:	7035392A362BE8D0CAA7738B22501A43CA3423DC1EBA83D14919CBBB42871FA47B478C5643A4BF12DAB0E925C6B3EB741404DC68F887B578EECF77E801B610A0
Malicious:	false
Reputation:	low
URL:	https://cdn-ima.33across.com/ima.js
Preview:	var _33AcrossIdMappingsProvider;(()=>{var t={110:(t,e,n)=>{function i(t,e,n){s(t,e),e.set(t,n)}function s(t,e){if(e.has(t))throw new TypeError("Cannot initialize the same private elements twice on an object")}function o(t,e){return t.get(r(t,e))}function a(t,e,n){return t.set(r(t,e),n),n}function r(t,e,n){if("function"==typeof t?t===e:t.has(e))return arguments.length<3?e:n;throw new TypeError("Private element is not present on this object")}const{Ajax:c}=n(59),l="https://lexicon.33across.com/v1/envelope",h=1e4,u="ima",d={GDPR:t=>{let{consentString:e}=t;return{gdpr_consent:e}},CCPA:t=>{let{consentString:e}=t;return{us_privacy:e}},GPP:t=>{let{consentString:e,applicableSections:n=[]}=t;return{gpp:e,gpp_sid:encodeURIComponent(n.join(","))}}};var p=new WeakMap,g=new WeakMap,v=new WeakMap,f=new WeakMap,w=new WeakMap,m=new WeakMap,S=new WeakMap,C=new WeakMap,P=new WeakMap,M=new WeakMap,k=new WeakSet;function D(t){const e=JSON.parse(t);return e.succeeded?{idEnvelope:e.data.envelope\|\|"",fpId:e.

Chrome Cache Entry: 557

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17275)
Category:	downloaded
Size (bytes):	17337
Entropy (8bit):	5.39443610250231
Encrypted:	false
SSDEEP:	384:Hr97dxBJdLEdA2m46UDteprqxDToiCov1k6hCwFDw+L:L97lJNEdA/RUJgrqxDdCodk6/U+L
MD5:	D4ACA66466789F29BBFA3DE6A4182EEB
SHA1:	CE0B9C771943CA47B3CB30359E9E5CEC3080C60C
SHA-256:	71406AC350B1DE3A5624C8EF2DC44AD8F6940EC2232D4B357A28F192A21B9DE7
SHA-512:	364A0589A1FBB6519A9843AC31E3013B26F20CD42ED5A771D1D75CFC039D571BF340843635B60B13B32B02D27AE9070A123947417B061993475CC484B5504612
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/main.js
Preview:	/! For license information please see main.js.LICENSE.txt /.(()=>{"use strict";function t(t){var e=0;for(var r in t)t[r]&&e++;return e}var e=858;function r(r){var n,o,i,a=t(null===r\|\|void 0===r\|\|null===(n=r.purpose)\|\|void 0===n?void 0:n.consents),c=t(null===r\|\|void 0===r\|\|null===(o=r.purpose)\|\|void 0===o?void 0:o.legitimateInterests),u=null===r\|\|void 0===r\|\|null===(i=r.vendor)\|\|void 0===i\|\|null===(i=i.consents)\|\|void 0===i?void 0:i[e];return 10===a&&9===c&&u}function n(){return Math.floor(100*Math.random())}function o(t){const e={NODE_ENV:"production",PUBLIC_URL:"https://faves.grow.me",WDS_SOCKET_HOST:void 0,WDS_SOCKET_PATH:void 0,WDS_SOCKET_PORT:void 0,FAST_REFRESH:!0,REACT_APP_PACKAGE_VERSION:"7.256.0",SC_ATTR:"data-styled-grow-me",REACT_APP_BACKEND_BASE_URL:"https://api.grow.me",REACT_APP_FIREBASE_API_KEY:"AIzaSyC-jIuCQMNEDKPVWUI0QaC9ksxOrgTWigc",REACT_APP_GROW_LINKS_URL:"https://urls.grow.me",REACT_APP_LOGIN_IFRAME_URL:"https://app.grow.me/iframe-login",REACT_APP_LOGIN_REGISTER_B

Chrome Cache Entry: 558

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 559

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36068)
Category:	downloaded
Size (bytes):	95634
Entropy (8bit):	5.589043234340069
Encrypted:	false
SSDEEP:	1536:7SQOL6V/E8JUA9YaW55Z9Dkxj3K/Knq31yYtjQAmneVP57w:GL6o5bRHyYtjQHneVP57w
MD5:	10E5462EFBA2B0A4686B58D9730CD8B4
SHA1:	D7A97211DEEC06A8C131931B8C6C33AE4B497815
SHA-256:	6EAABCB8014DEF66A5A3736EF3F0BD7E2B1F8CC911A072A699B6E52280739817
SHA-512:	25231A9B49B3BB093E33D207D58F52626F83CE7FFE4CCEE4D825E796F8B2A66010D22BD5D71E6C4FE329C7CE3013591B83DBCE8190521BD86CB103331F1D141C
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 560

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 561

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4316)
Category:	downloaded
Size (bytes):	4317
Entropy (8bit):	5.789395269355661
Encrypted:	false
SSDEEP:	96:LJJQ/654yn2dq8/LaO9vFQKW+Fb8Kuai2VK:lJQ/6h2dnLaO9vvFb8taPK
MD5:	2AA3B66245B7C66E3A969D8F9062DC8A
SHA1:	6F95EFF3599781A8C84028CCF7836A1CBB04E100
SHA-256:	854FBD22DC4AD703120F220EB21DA2EAA966FC39949F49B8D4D547FEC52EF76E
SHA-512:	57B3F87A333201F0EAEDB72F684605702DB2016DA92E1EA7BFB6981C88416620BFE57FA03E0E3D872801B59064D7B73A43F2585ED3D300F84D0A4088D6CA7937
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/infolinks_main.js
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('(z(){6(5.22){y}5.22=1d;7 K=9.1I("2B");7 U=L("3A");6(U&&U===2A&&13.1m()>=0.4){y}6(5.1f.32=="2e-1R-1Q.17"){g();y}7 W=5;1a{6(5.10&&5.10.1f&&5.10.9&&5.10.9.1b&&5.1J!==5.10){W=5.10}}1c(n){1x.1z("1l 1P 2Q 18 1Q 2w 2J 2g 1P 2P 2W.")}7 f=2t.2s.2j(),X=z(p){12(7 q=0,e=p.w;q<e;q++){6(f.1w(p[q])!=-1){y 1d}}y 1U},R=X(["2D","2z","2E","2m","2n 2o","2l 2p","2q"])?"2u":"",Y="1T"+R+".15",C=5["2f"];7 o=L("2x");6(o&&R){y}7 B=L("2y");6(B&&!R){y}z a(){1a{y 5.1J!==5.10}1c(i){y 1d}}z L(e){y 5[C+"2c"+e]\|\|5["1F"+e]\|\|5["2F"+e]\|\|(5["u"]&&5["u"][e])\|\|1r}z P(s){7 r=s.1H(/[&]/);12(7 q=0;q<r.w;q++){7 e=r[q].1H("=");6(!e\|\|e.w!=2){2I}7 p=1M(e[0]);7 t=1M(e[1]);5["1F"+p]=t}}z m(){6(5.u&&5.u.1N&&a(

Chrome Cache Entry: 562

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15562), with no line terminators
Category:	downloaded
Size (bytes):	15562
Entropy (8bit):	5.496522114175185
Encrypted:	false
SSDEEP:	384:ikBy6l6J01yJyFusH/4dvZbxZpmM+4fCVTomdNo0Pwk:TIq6J00JyFtPd2U
MD5:	10DA3249009C676657093E9537DFFF17
SHA1:	51BE73E8597BC74E575A40CE0C388D9A2F90E3BE
SHA-256:	326B658D124E7D0C26F4B8F2B76D2B814494E4E984801A45FA7B573F1022AC97
SHA-512:	FB40E54D373E6CB1ABFC32D6080B5C5B720012F3BFF76A6FE53E220592F1EF98AEC35C3E757B469AC126A459723A3BFFAD6591CDAD761ADC156D65CD06056C73
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157743&gdpr=0&gdpr_consent=&us_privacy=&predirect=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fpubmatic%3Fchanneluid%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,ai=aa.top\|\|aa,aj=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,az=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ao="pubmatic.com",V="ads."+ao,al=1,Q="https://",a=(aa.__cmp?1:0),an=function(aE){return typeof aE==="function"},au=console.log.bind(console,"PubMatic:"),at=function(aI,aH){var aF=0,aE=aI.length,aG=false;for(;aF<aE;aF++){if(aI[aF]===aH){aG=true;break}}return aG},n=function(aE,aH){var aG=aa.document.createElement("script");aG.type="text/javascript";aG.src=aE;aG.async=true;if(an(aH)){aG.onload=aG.onreadystatechange=aH}var aF=aa.document.getElementsByTagName("script")[0];aF&&aF.parentNode&&an(aF.parentNode.appendChild)&&aF.parentNode.appendChild(aG)},aq=function(aG){var aF=aa.document.createElement("iframe");aF.src=aG;aF.style.height="0px";aF.style.width="0px";aF.style.display="none";aF.height=0;aF.width=0;aF.border="0px";aF.hspace="0";aF.vspace="0";aF.marginWidth=

Chrome Cache Entry: 563

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=c992f38f-79ee-483b-a206-98cc8db521aa
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 564

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeoM:8DIGoXbfCYKpgrlywuqIQWOeoM
MD5:	4729D992780A2C16CEDD377037B32FA3
SHA1:	F84DF5BB801F10ABD274F2DF1CD9CEEF3C96AF12
SHA-256:	F6E97791F8DCDB867599FD951909CA761D7EE18F33AA35D71818AAF58D84BA1E
SHA-512:	259504FF963D4F93AFB79A58F05453E3212BD01C2D08FE60231EBE43E29E8D60D3B47C46DC54590837A86E72B9F87F8BFEA0AFE31808A087972C77BF51F89671
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2F&pid=Zmtrhky2yPK4w&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*vl_7ZqnLe0BrqXTHleKa49ZXSBTkImbeZLzTNtqBp_mgNChAlqMZWuk5sNuyPJae%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 566

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 58065
Category:	downloaded
Size (bytes):	26416
Entropy (8bit):	7.990528021092053
Encrypted:	true
SSDEEP:	768:WYH2SrEIdEt/eLfk53jh2wqHr5mVXRNDEOPkT7LaznN:WYWF/gu3NAH1mVXHo9naR
MD5:	88D49932C3F3431D155686FADC1C32A2
SHA1:	A8A1840CF565E071C32B1026156FC305A94A09A2
SHA-256:	F46705588406BDCEA74EAFC60A20145607D845C097F629F2AEB5C747C1543286
SHA-512:	7135959C6C94F129480358F1D9590C541A845A61179204881A167317937439D56655045760EE04FF48504FA5A0EDC8083F9540FBEE7EC9F551B92D0C589E912B
Malicious:	false
Reputation:	low
URL:	https://static.kueezrtb.com/js/latest.js?_=1716283337639
Preview:	.............W.J.(.......M.fd...q@.EQ...Y.:.B.@.w.....:.8..w... .....Rx...4.#...Z.."...5.....)..32_..6..v.B..m..A.@\K?......lG.)...VT...0d...?..B:R.k?......u}....#...v....B.,.q.7...`.Ft2....r..l.'....E.....m..w.....WQ..U+.+...! .:..u..=:+.....UM.%...Z..?.Z..eM...0........%....).?.q.s..>...Q.......?..}......M+.k....\r.....~"..b.......8..._\|<z...". .$....@.~.k.......h......53.K.~A\{.N....W.L.j.....pPH.K....Ee.`....?.?..c..u......U....5a..).e.........r~.........[.eO.V?.R.B....;p!......I4........W,..E...W,p......a..q..rs.0....%...K...ZTx...c... .zJ...&".TU....].P.<._.4..D.B.?~C.Y.hs!<0....d...Y.@E..uV$."...~VX0~..<]\W\. ..S..T$4..{..I.=...6.WF.{)r.^_...a,.....(...V..f.p..%.K...ZE.+W.l.^..a.......<.$;8.,.$...5^..0....C.......R.Ti..[.p.U.0..n..I.d\n..xZ./:..6.XEq]!..._.=.y..xz.+..u....[.@uR...J`(..m`~..F.<^...3~t.n..%q.k...e.......w..t...S\.-....2..4.eR.......\......+.....`..h......v..o..N.@.D.)FVl.N....}...DX.k.S.....

Chrome Cache Entry: 567

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (41666), with no line terminators
Category:	downloaded
Size (bytes):	41666
Entropy (8bit):	5.022889899249485
Encrypted:	false
SSDEEP:	768:Yn6tnjnPJnesN8nZngNolgWDWkts5KJCsN8nZnT5YBN8nZnUksN8nZnbDsN8nZnO:QsN8nZnTgWDWkts5XsN8nZnTmBN8nZn4
MD5:	38F0A949727A09FA6BDF75BAB1A4912D
SHA1:	19E618D9EC1035C02B88C36DAD67D86E91FEC005
SHA-256:	BD1BF71E74A1E68EE726D952D516148B497B32487A909A231FEA49D575A7D2CF
SHA-512:	854726B3D6A6FC971F17FCFFA4D6E581C6D5551452CA94A6B73FBD8CD18E9E29C310E0742BC973744F0699DCC9F733F77E758060364D7C5C3F608110BD6FFB46
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1931.004-3.034/in_place.js
Preview:	!function(){var t=window.$ice.products.$create("inplace",{instances:[],addApiHandlers:function(){var a,o=this,r=this.$root;window.addEventListener("message",function(t){try{var e,i=JSON.parse(t.data);switch(i.name){case"productReady":o.setAdview(o.getCurrentInstance(i.slot.id));break;case"inplaceClick":o.inplaceClick(o.getCurrentInstance(i.slotId));break;case"sendClientLog":case"productClick":r.event.fire(i.name,{params:i.params});break;case"setVpfc":case"sendAdView":r.event.fire(i.name,i.params);break;case"handleRefresh":if(!i.isVideoShowing){if(!(a=o.instances.find(function(t){return-1!=i.slot.id.indexOf(t.slot.id)})))return;var n=a.settings;r.event.fire("refreshInplaceAds",n.refreshData)}break;case"setVideoIntersectionObserver":(a=o.instances.find(function(t){return-1!=i.params.slotId.indexOf(t.slot.id)}))&&(e=a.settings.instance.hook).adContainer&&(e.mrcVideoAdMode=!0,e.currentAdIndex=i.params.midx,r.settings.observer.unobserve(e.adContainer),r.settings.observer.observe(e.adContain

Chrome Cache Entry: 568

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.493270155702426
Encrypted:	false
SSDEEP:	3:YCB9ACSdRMQE7XMIwdHr4:YCcTdNE7cIwFr4
MD5:	003290622A7198B3D640D383C0EF63DB
SHA1:	600BB3300697E4C5E5E15B264526B793CF88F08E
SHA-256:	3FFC8899ECC2573B2CC716BD79F62BCC44939A4EC053BE82B9D33F38913CC7D7
SHA-512:	0A563843002C1DE258E48949F3C3B136309E4AF20E6B09646D7C44722BEF52B88DA5399051F9951E8FED5412E3C361F3BB4F6E3A1E52C3CAC1A3C5B23ED1BF12
Malicious:	false
Reputation:	low
Preview:	{"gdprApplies":false,"isAdditionalPrivacyState":false,"countryCode":"US"}

Chrome Cache Entry: 569

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1851)
Category:	downloaded
Size (bytes):	65297
Entropy (8bit):	5.57823547026774
Encrypted:	false
SSDEEP:	768:m8PlWveq2ODb8aLax1y2QTrsF9NKJCnaduURHJwTYqZ9bUA+VxyEopp3LyrQ6:m8Plaeqrbje0E9NQKaduWwcqgyEopFs
MD5:	F58D2B744E1D3E0362C83AB33A4FE131
SHA1:	7E1339AAD1D97C74A26CEA52D2AEDB113E4431B6
SHA-256:	A4BFB191CB7C18404CB97CAAC7DB06BD9049622E47A7F9462F8EC5521F0F0A02
SHA-512:	8A2EE51AFFD39996A2CE4B6D4F14521A323E862E54F40BF47A5C4268872711579E91284C1E1CFA7EBA17B4AFBF71CCC40200AC7FEF4D800B103DA361DCAC8D79
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/rum.js
Preview:	(function(){function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),p={},ha={};function r(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in p?f=p:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ca(p,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0

Chrome Cache Entry: 570

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	411
Entropy (8bit):	3.7440065626157897
Encrypted:	false
SSDEEP:	3:YMVFt+KpJHJjLTDobNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5MJle1s1BI6HFQ6aah:YKHjzozz/iJHBI6lHr3
MD5:	CEA7F20FF2DA75275D46E2EABF9AEE5C
SHA1:	34A85303970504025B6549C2E85F3AB5ADCFBCEA
SHA-256:	242D03FFC264A020F746EB7725A1A5876B76640AA709F842FADE7A448C93CFFD
SHA-512:	B151B7D40A0BC0347C49FA9512F8CFAD0AFCC3079E8C13626D62FB444CB43FD0FB18B5EFA5501909CC9348E035FC436BAC8CEBFAAA733DAE8877013A4D846ADE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=4081099331167574&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=11&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283303844&lmt=1715994881&adxs=330&adys=1946&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=4&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=1&psz=300x0&msz=300x0&fws=4&ohw=543&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbRIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=Flight%3D1%26monu%3D300x250_B1%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_400%26auction_id%3D694fab6f-82e8-4be1-82b8-39a7daa3ec0a%26monu_df%3D0.09%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.09%26hb_size%3D300x250%26hb_adid%3D311a28cb96ae498b%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.09%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dfalse%26amznbid%3D2%26amznp%3D2&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=4216580245&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CPOwqca1noYDFXeogwcdFQsFUA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"9",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 571

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 572

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	679801
Entropy (8bit):	5.456464326146868
Encrypted:	false
SSDEEP:	6144:hyHkqkJdLlT848kJxgTSTKr6C0nvuVtp/SompQYkXg+PVMTCW+JIh1DbaxRQTBCJ:I6CTVDY2M2WgIrD2xOTBSlLLTtWy
MD5:	7A09C9D572E18B0D0212D92962950750
SHA1:	10E21BA08AC2F5246439E729EF25D263FD9F779B
SHA-256:	C5078BAF541570EE92E75F715FB289817AAD3C9D0676FD68C7072698103EB604
SHA-512:	32AB75670AF78973288269D6C384432950D11B26D6DDC6C0B54A00F3913474F54C1F2A9FFAFD7C93CE83A601B66A95E107132CD88EF1A499F6426881D183D527
Malicious:	false
Reputation:	low
URL:	https://monu.delivery/sitesplit/d3/smartzones/0.5.5/0/e/f234e7-fc25-4181-9fdc-65d9171ace67.js
Preview:	var $MMT = $MMT \|\| {}; $MMT.cmd = $MMT.cmd \|\| []; $MMT.configuration = {"user_geos": {"geo":{"ip":"8.46.123.175", "city": "New York", "region": "NY", "country": "US", "lat": 40.71230, "lon": -74.00680, "type": 2, "accuracy": 20, "ipservice": 3, "metro": "501", "zip": "10118", "tz": "America/New_York", "utcoffset": 240}, "country": {"geoname_registered": {"is_in_european_union": 0}, "registered_country": {"is_in_european_union": 0}, "represented_country": {"is_in_european_union": 0}, "is_big_4": 1, "is_na": 1, "is_us": 1, "tier":1}}, "gdpr_config": {"gdpr_cmp": "True", "privacy_policy_url": "", "popup_text_color": "", "popup_bg": "", "btn_text_color": "", "btn_bg": "", "position": "Bottom Right", "ads_check": false}, "publicaId": null, "exclusionUrls": [], "activityTrackingCode": null, "activityTrackingUrls": [], "loadAsync": false, "loadDefer": false, "loadInBody": false, "inViewDistance": 1000, "enableErrorLogging": false, "monitorRedirect": false, "sovrnBeacon": false, "deliveryServe

Chrome Cache Entry: 573

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	589
Entropy (8bit):	5.098146251310216
Encrypted:	false
SSDEEP:	12:cRt51tgbedQLyeb+cTYt3eb+cTYtJOgbe8QLyeheLOoNeheLOWKKo:u3E6dQlFTnFTW68Ql0LFY0LW
MD5:	733E93D3D9820A7BE75110FDAF4FC2C9
SHA1:	DCA0E6D90F966DD4305B029403F3725E7F0D1844
SHA-256:	7990C69783A09238C6B73DDC771A13907D93CF1A5E194F301DC69D12FE38B26B
SHA-512:	267B26220673D37C969C6F7E9E01F95D2084FEEB861FD6FEBB4CD635C5BA400AD6BFDFF8F80381EEC01B4370A2B18B7576026B8B138B816BA1E08E706D0712B4
Malicious:	false
Reputation:	low
URL:	https://synchrobox.adswizz.com/register2.php
Preview:	var com_adswizz_register_PROTOCOL_VERSION = '2.2.0';..if (typeof com_adswizz_synchro_listenerid === 'undefined') {. var com_adswizz_synchro_listenerid = '50fbf36fda3a979d5851b7d9e146c8f2';.}.else {. com_adswizz_synchro_listenerid = '50fbf36fda3a979d5851b7d9e146c8f2';.}..if (typeof com_adswizz_synchro_listnerid === 'undefined') {. var com_adswizz_synchro_listnerid = com_adswizz_synchro_listenerid; // backwards compatibility.}.else {. com_adswizz_synchro_listnerid = com_adswizz_synchro_listenerid; // backwards compatibility.}.var aw_0_req_gdpr = false;.var us_privacy = '';

Chrome Cache Entry: 574

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.676424705785917
Encrypted:	false
SSDEEP:	3:r97RX/hIdJ6s+CIbRcYPpv4norX+NLzFFutEn:7XpgL+CIbrPBworePuOn
MD5:	B1DDA749B3C9E74831E6BB9AF912F572
SHA1:	DBD1B67D4240D23B65DA23A07664589D90C1E160
SHA-256:	18DB1150C11FC8286B8B01D4D1A1943A02D933C7A66DBBFDAFF22171A5D8AAD0
SHA-512:	49011AA3DBFB3E9530CEE519BE1870496C5D66CAE32653DAE452A08B8FFA8BAF5884F2D54429624C97AC72411964E31FA8C6F53717B513AFB8D59D1D58FF1ACF
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=2905928893877252&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=7&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342322&lmt=1715994881&adxs=803&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=300x-1&msz=300x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D6%26monu%3D300x250_B6%26slotNum%3D1%26placementNum%3D1%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_500%26auction_id%3D5d1c0b0c-f956-42d8-bce9-210417effa71%26monu_df%3D0.10%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.10%26hb_size%3D300x250%26hb_adid%3D239d78ec603fa81a%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.10%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=434882259&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....y..xyr#.. tr.p.....x`.`"..N.G.._0<.....L..,...l;.].-.@.,99(,.K,.\r..X...Fv...:..WsH.c..W.'Y..$..sR.5w8.;...s:....V...(i5.H.....

Chrome Cache Entry: 575

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
URL:	https://imps.monu.delivery/mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=i.r&u=KJI01M&d=%7B%22auPath%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDW.A%22%7D
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 576

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.0042193681071545
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKo0:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeM
MD5:	4A64CB4B7DE830E5A463316A629D3BAF
SHA1:	2AA5884F7BFA64F386884ED7B258DC41D274E888
SHA-256:	D09BF971A29FE8ED23D5F6FA985E71D636F13A63062290B15297168244936D1B
SHA-512:	12FD7DA3A1FF5CB8BD56F1F0B39005BA1F24D876D185829DC28A96F8C243AB1240362AF255192104E9DBAE33AF883825CCFE56191F2D2209A8C49F1653FF5A1A
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=1&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 577

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.080128836461764
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBCkmd6E8hzztqMrZOAYCfUMn:8WiIUemo/HPbfCYKpY4DCVeCwBZqMr1D
MD5:	C91D21FE501575405381BAD2098AE9C7
SHA1:	0D2659A4BB91EFE4DE193E427C563FE2A04552FA
SHA-256:	CC5B63D17529491943AEB139DC095819EECECB865265115924105B7AF4353B77
SHA-512:	835A56BC8C4412975B63AE25E7EBCAE04C097DFAE339FCAF6EF1472EB9E7B335F8BE020B703D30B3CF16DC929DD1AC40DF3C5EDAC400AFF2F005102A116A73E1
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-minuteMedia_rbd_rx_n-Beeswax_smrt_n-adYouLike_3lift","cb":"17"})

Chrome Cache Entry: 578

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeN:8DIGoXbfCYKpgrlywuqIQWOeN
MD5:	B6D678DFB7FD7C7AD1E0CC8B60AFFACE
SHA1:	ECF11A8EAAE7629DC92D817BEABBED9BF365C6AF
SHA-256:	F58C6FD2AEB9834765BD5CC74B09E9A062BD201D84031B7C5BBB0B0C9D98EF9A
SHA-512:	1D4D0C23CB1DDA6D2E116828E0EAAD8A07E81F9F9A45A6AF228CF4246F9111FAA278CB7D7F80040740698F03E240F210EFA0C2D6FAE09601F4EC68D2B1D7F436
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"6"})

Chrome Cache Entry: 579

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (323), with no line terminators
Category:	downloaded
Size (bytes):	323
Entropy (8bit):	5.067261912372862
Encrypted:	false
SSDEEP:	6:NS1BbZxqzMdIzupUQO6WRqfN3St6zaQ/uRqRkGmq/d3efeQ6gyMT:Y1BCWIDRr6zuRqBdu2Q6hMT
MD5:	83453335210C6053B95917DE795D63E1
SHA1:	E30621DE36D969D06E67064EC95847CC09347C94
SHA-256:	3400CD8A5FF1E45998A1B5AD7A4A1B2ED0DA848F793E22AD527E1C0D6F9BA05E
SHA-512:	AF823E4B5619455F99C1E171559FA0C10C7D83BB018A0427618FB554D16A3ED2C73539E9F6C10FB0673CA9E1276DCC3D0FBED3F79CB8A9510884A8D1DA284425
Malicious:	false
Reputation:	low
URL:	https://router.infolinks.com/gsd?evt=afterGSD&pid=3245929&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&jsv=1931.004-3.034&_cb=17162833170010
Preview:	window.$ice.event.fire('afterGSD',{rid:'dac91ce8-8662-48d4-977d-60a906f438d9',rs:'rt3007.infolinks.com',makey:'190f15170f1013120f1016140e101610171319121810191814130e69737073',ms:'4018',prs:'u,p',fbc:true,cks:{cuid:'076f169c-b430-40e2-985d-6d2a7145d512'},scl:false,wd:{contentWidth:800},cfg:{itl:0.1,xbtn:0.1},wsid:'2368'});

Chrome Cache Entry: 580

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14212, version 1.0
Category:	downloaded
Size (bytes):	14212
Entropy (8bit):	7.987869121608246
Encrypted:	false
SSDEEP:	384:5bJ1keL4/s04W4gUz+/1x55hsno5oky9RAl51Gx:ZasaD/V5hsnDVyC
MD5:	8B70A44A98A0AC5D721DF7D8F5136F7B
SHA1:	10E10C01E732F3D35A78E1051BFCC9FE2589DDDA
SHA-256:	5C7F0E173844556DA7CA5EB8936FA3DAB1C00206960920A49A1EEA9CDE2BFAAF
SHA-512:	65833D65EF11617A6D2D2A9C2ED81FC7079368DA6F9569B56404FA5A66D878088D95C5632B216D0E6C7F3E40AEA6A6D7DF5B9C0147743ECC06F38E95508397F2
Malicious:	false
Reputation:	low
URL:	https://cdn.app.sbb.ch/fonts/v1_6_subset/SBBWeb-Light.woff2
Preview:	wOF2......7.......x...7#........................?FFTM.....6..B.`..J.......X.].....6.$.... ..}..5..f.... ...U....Z-H.f..L.C......\fZD...m.f4.P...!r..`....Z..NM.}t:.j......M.w..M....uK/........`..?A.......8.G..o..Ww.L...........&:....9`wv{..u(...o....z..3..B.()...2v.....?._...7.........P.d..B...K...}.>...D:.3k.T_e.......'....D1..Lb.........d.C...`K..b.(.t....{.\|]...+.).Yt.+.yLY..{..~..OV..{. .]'&8.F......s....X.4.@.#....?.jI.&C...........E......9T.=V.o..u....lh....).A....y..%8?NZ....=o.2...{.36.m..,CN.Dv.$.~..._.0-.f.;.Y.Q...g..=.....B..DjiIf.tg8....9..C..I.$t.......I. thH.R.v..4x(!.#b^E.t...=...Zc....Q"b..L\..b.....Q..Y;w.+..H.. .......~.^x.V..G>..o....,zO.....@../?8N.F.9z...t....e.-...........x...Ea.....g$Oj./.~..s..p.....RB......&.y...?...7......xD..z......l..P..`S._..T.*.Z.A...O..x.Z...c...i.h.h,h<...i.l...u7.m.h.iW.....4...y...9.[_.oz......?q.^.^....V..z..~.IU..-.[...[C`....Qeaq....H.h...+...r..:6cT..IEL.W$~.. .#.'.X^....IE.%..:-.@.'.h..&.....

Chrome Cache Entry: 581

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (412), with no line terminators
Category:	dropped
Size (bytes):	412
Entropy (8bit):	5.494343202617453
Encrypted:	false
SSDEEP:	12:wjo/8LlagCz1KmbC0vCf2Dvi1wbrcRTiY:T8LAz1E06+Dvi1XT7
MD5:	138D260997ECDDD70A193B88FFE8B349
SHA1:	F80611E56DB044FC18EB114D67061E955D951190
SHA-256:	C8B11CBCDDB4EC482A092DD7611941C0041563C6CFB7A925806F82C7E3C79430
SHA-512:	54211EFCD0C7958B26665FC80018DA5ED85A2B158D30A51CD471EC9321F76A71E2137F7BAF4ED977FB3617AB29E12393F922422FDBF3E01A352E710CB95123B6
Malicious:	false
Reputation:	low
Preview:	9dqG7nOgO4RMvITMVhO514zNvtOuOWv_elUo7kFISsaFO48CjjVC1nq4SNjMeEqUrsXH0hVCPCqjZozC1nq4ToqvttOgVnQC0cFd0lvotZFaO4GWTlA50tQCTsFo9tOgOHUFedY0SNqLOCQCTsXMecFM0lUoO48ChHzC1nquSsUkxfaD0cZCPCOyv5rMVI6sPI6C1nquTfaGeEjH0tOgO4rQ147AV4VQOCQC7WjkxlXMO48ChWjNOwF_7WuC1nqd0leGSsUISsaFO48ChFHC1nqy0fadSov_0cZCPCODVIzC1nqQSNvoTlAISsaFO48CVh6AVhRC1nqD7sjdjcFy0fG_SWZCPCqYSljdxlvi1oUFeDX0SNqLOCQCxNjG0nOgO4OQVhvCvW0FPh6NPIzQV5TC-r==

Chrome Cache Entry: 582

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (412), with no line terminators
Category:	downloaded
Size (bytes):	412
Entropy (8bit):	5.494343202617454
Encrypted:	false
SSDEEP:	6:Luxm3unV7eAXzDWpFeSPUbBx2dh1OYYWSee4oUBhYuCyL6FhKz0sgDT8giAfs49/:LSVpzKneSPUbGjZWMrLCcYsMaXM/
MD5:	E34AAC90BDAE248C9D56D412A59B8B51
SHA1:	6B674D175E8B6A11BCD88790F6EEAD7ABF28C4BC
SHA-256:	75A02966A0262D8C52C135C3F90457E09A29D04DEA86ED836755BD5919E22FA8
SHA-512:	0D21C7BFE901DB5A1C848A2C50210914B129AAF1ED4BD3A3C406FC7EB6F4C5DA6E847B899F5C8593C065C2F77CEB1D2B17BE1EC3991D836E86C787D7F12D50FD
Malicious:	false
Reputation:	low
URL:	https://u.kueezrtb.com/fpd?_=1716283292044&yv=11954&h=custommapposter.com
Preview:	8mG0eYWJWh-DXRiDxsWT_hyOXVWuWLXlfqPSeprR5KtrWhIQkkxQ_YGh5OkDf6GPAKdEbsxQoQGknSyQ_YGhiSGXVVWJxYcQbarmbqXSVnrtWh0LiqBTbVcQiKrS8VWJWEPrfmNb5OGFWQcQiKdDfarDbqPSWhIQsEyQ_YGu5KPpHMtUbanQoQWjXTADxR9KoR9Q_YGuiMt0f6kEbVWJWhAc_heBxhxcWQcQeLkpHqdDWhIQsLkOW1rleLuQ_YGmbqf05KPR5KtrWhIQsrEQ_YGjbMtm5SXlbanQoQWUxRyQ_YGc5OXSiqBR5KtrWhIQxs9Bxs-Q_YGUeKkmkarjbM0l5LnQoQGN5qkmHqX3_SPrfUdb5OGFWQcQHOk0bYWJWhWcxsXQXLbros9OoRycxTiQ4A==

Chrome Cache Entry: 583

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49624
Entropy (8bit):	5.573297271781645
Encrypted:	false
SSDEEP:	768:/YXB0ygV8bxaXdC8TFwwPhDjM3AdcJlU/pp6luFQMh0zHYYrb2xteCC:/KB2CbgFXhXzSlU/ylaU6XC
MD5:	0D2F8F408E0057533013A2D5BFC9ECCE
SHA1:	3E75D51AD54935A1C0DBC90C1A3AB11780AE6AD2
SHA-256:	98655A5AFEB40B3E1CD4B6B45975487B6CC8EDEC0A536A22DAFEDDEA327EDFC3
SHA-512:	FAA8943BE7EC080CE3E0DAC5B808C6B96F85F3708C3A8CE951A78081986AB67DB79C03BB5270685FC8F4B9D6C4F5536DBBDC6D1F3ADABD90C5821522A5D1BC10
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f/ba92dbb5-02d7-443f-8481-b67e4427328b/de-ch.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Jahr","pclifeSpanYrs":"Jahre","pclifeSpanSecs":"Einige Sekunden","pclifeSpanWk":"Woche","pclifeSpanWks":"Wochen","pccontinueWithoutAcceptText":"Ohne Zustimmung fortfahren","MainText":"Datenschutz Einstellungen","MainInfoText":"Wenn Sie eine Website besuchen, kann diese Informationen .ber Ihren Browser abrufen oder speichern. Dies geschieht meist in Form von Cookies. Hierbei kann es sich um Informationen .ber Sie, Ihre Einstellungen oder Ihr Ger.t handeln. Meist werden die Informationen verwendet, um die erwartungsgem..e Funktion der Website zu gew.hrleisten. Durch diese Informationen werden Sie normalerweise nicht direkt identifiziert. Dadurch kann Ihnen aber ein personalisierteres Web-Erlebnis geboten werden. Da wir Ihr Recht auf Datenschutz respektieren, k.nnen Sie sich entscheiden, bestimmte Arten von Cookies nicht zulassen. Klicken Sie auf die verschiedenen Kategorie.berschriften, um mehr zu erfahren und unsere Stand

Chrome Cache Entry: 585

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.561814811046517
Encrypted:	false
SSDEEP:	3:YM2zWXJvN3VuLAx6XJJRMLkJ5fMYn:YM2khkAyJJRMLA2Y
MD5:	7016DA56C324CA7D24D38F363FB98B3C
SHA1:	DF7BBC4D5D99C9EFECC2885523BC53176AD1354A
SHA-256:	BA8451F39B0887DFFF955335E5BF9007D350BF5C2D9F5EF697E07275ECBC331A
SHA-512:	89849DA0DE17EE15FE25B99B5D697C100149BDEF67436817AD1BA1BFB8B478D6079A929EBD8E899F75A425B97FC8DE5248800EFBABDC06562B0A9CD4B490CE84
Malicious:	false
Reputation:	low
URL:	https://api.id5-sync.com/analytics/1013/pbjs
Preview:	{"ingestUrl":"https://api.id5-sync.com/analytics/event","sampling":10}

Chrome Cache Entry: 586

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 587

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1202), with no line terminators
Category:	downloaded
Size (bytes):	1202
Entropy (8bit):	5.548059434869482
Encrypted:	false
SSDEEP:	24:CNNGQV61JPQV6Mq6QV6MnfTsMo1MTaM/USKCvQeHDkomlg:CNNf8a1q71fTdoqTjTKyQecq
MD5:	77FDB0B91B60F17E8A8774CE72207B0F
SHA1:	52882A96CBEF7DAA0281FF62FBD7C7ADD8648694
SHA-256:	B68B50DB1F3B522D8E36032B5EB5F9396C7588543AE78BA940391932F9D93EAD
SHA-512:	3ACB8487BA5C086FD139BB271D9F913B2905268483DF09EF3D399EA52CF88370BA5142945DBD36230069616CE46581B423D49A0B617C4DF79B3D43CFB1158647
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63986577&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://um.simpli.f

Chrome Cache Entry: 588

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.010435196472538
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DCVeYaReywuqMtQWYSoek:8DIGoXbfCYKpEeYlywuqIQWOek
MD5:	703621464D0EBDA40B3127E6CEEB8C29
SHA1:	093BEC9E006B1D0968DCC93687CA531BAE1CAB45
SHA-256:	4CF66860DE73C82EE7F69B4CC97B7EACC9540401CC1D314B8A8FBE2DEBFDF4DE
SHA-512:	B9658A18E6E3A21989E1C52BA580C3966991FEECF077F824E6A48C44AAA9F295D369871330981F23671ADF4448EBAF4779254FA4805A36D7E9928A6DC6D02822
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=9&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"9"})

Chrome Cache Entry: 589

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEMYaxMmXluze0XiCs88RzPI&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 590

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 591

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.9821372947076785
Encrypted:	false
SSDEEP:	6:8WiIUemo/HPbfCYKpY4DeraReywuqMtQWYSoeD:8DIGoXbfCYKpgrlywuqIQWOeD
MD5:	22EA7455FC49776D3885D9752E410753
SHA1:	995E4F7BDD68E559C6B9B8FBF468BE324746FC7B
SHA-256:	340D1C34DDCB9798A757805C393CEBC14103F6F6B26D3B5E847FEA536F7F1DEB
SHA-512:	C28FE7B4D372CA3A258DB7623B0C9F94520DD0816702EAC5BBFA6A36571ABCA2EA2D66102BDCADD0FCF736E5FD8508FF6FB2A5FD46B2909FC967047CD787872C
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Chrome Cache Entry: 592

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 593

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 594

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://1890c53250268d65cfe709175e182771.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 595

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64746)
Category:	downloaded
Size (bytes):	464455
Entropy (8bit):	5.511302209459002
Encrypted:	false
SSDEEP:	6144:qAhlmOD7Anpn421DlVzLbI+qGeLWf/RrLfrxb4A0Ti:NhlmODmQ3BWZraAt
MD5:	C417BBA29020C1E8F33FA283F540B69B
SHA1:	BBA9D5B87D4A5877CFFF16450A7B1550A6301BB6
SHA-256:	ABA3B1E74A53993AB198F8376EAF3BC0C9D841B9BC6D95F47AB839BBDB502D47
SHA-512:	E2EAE30C6BA137D890144DFB9F0A0A5A5ABD73ACFB37D86C0E1DACBB1D02688F455C53D02B1DEAB24FB3D3029698A9561237418A997795C3008A0380EDD3E52A
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202405090101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. .*/ .var ba,da,ja,ka,la,ma,pa,oa,ua,Aa,Ha,Ja,Ma,Oa,Qa,Va,Ta,Xa,Ya,Za,$a,ab,cb,db,eb,hb,jb,kb,lb,pb,qb,tb,vb,zb,Bb,Cb,Ib,Kb,Jb,Nb,Ob,Db,Pb,Qb,Rb,Tb,Vb,Xb,Yb,Zb,cc,dc,ic,kc,lc,nc,qc,sc,tc,vc,xc,Ac,Ec,Gc,Hc,Ic,Pc,Qc,Rc

Chrome Cache Entry: 597

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	193452
Entropy (8bit):	5.326837029233028
Encrypted:	false
SSDEEP:	3072:n1idq9Gw/AdDvisqgElowInbAdsYvm7MSk:n1XGw4dDBqgqInbAd/vm7Mb
MD5:	70DBD44BB2C4A7A4AF123EF039D7D2B0
SHA1:	C5675B2C3CD5DA001BB60E8516BD1ADD42BAEE64
SHA-256:	82EFC7A10A7E20BCD83BC9077B8ACF0D172899B7FF5CA7D99E103F055594EFEA
SHA-512:	08A94908C71B684E2CAC4ADC160646C8A6AC047209A86D6CCDE0C9DD30BEC8FBA4CD3725FDC760F2EE8058B31BF4AD7038D11F4593583E4E2E6211A61B6F7C0E
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1931.004-3.034/ice.js
Preview:	var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};function _defineProperty(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}!function(){"use strict";try{var appNamespace="$ice",what,$extend,$fn,$create,$root,$infolinks,loggly,event,utils,comm,shared,products,autoPlacement,externalTags,updater,inplayer;window[appNamespace]?window[appNamespace].event.fire("checkQueue"):(what=function(e){return null==e?"undefined":{}.toString.call(e).match(/\s([a-z\|A-Z]+)/)[1].toLowerCase()},$extend=function(e){if("object"==this.$root.what(e)){for(var t in e)this[t]=e[t];return this}this.$root.logger.warn("source is not an object",this)},$fn=function(e,t){this&&this!=window&&("function"!=this.$root.what(t)?this.$root.logger.warn(e+" is not a function",this):((this[e]=t).$id=e,t.$parent

Chrome Cache Entry: 598

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.579232079855505
Encrypted:	false
SSDEEP:	3:McNM9F0ffrVyzHz91iNS/6bB8tfrC+cGdkAlTqGzu91:L8Offszx1iNWwKJr3NlTqt1
MD5:	5E31BD5BB21C484327890E9A26D8E71D
SHA1:	55E64236E12F02A34CF2CAFB38CFD7DB96D815EE
SHA-256:	9131F24599F8359D197C967905B72D8C976EC95C0A1848064FABE38ABEA94AEB
SHA-512:	B64E90814D7705F73285410ECC56439AC95C19DA26395277E279179FD8620D2F1D07B5098BDBF7130F2F38832754E1858319628AA4D4D5FF57E89B20321E6D0F
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2105897831518875&correlator=781193899851602&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDH.C&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=14&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283333074&lmt=1715994881&adxs=268&adys=45&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=b&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=2&psz=728x0&msz=728x0&fws=0&ohw=0&psts=AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA%2CAOrYGslXqzWxZnMwa10HhsoG5C0a&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KmVNQXo4VzlVczlldE5yeFFVMzFTZEJESWdJTWl2YTVKb2lNYm9Sd2ViMjZnTkZtNFN5NG1IVWkwcThWa0l3aTVYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283285144&idt=7652&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D3%26monu%3D728x90_A3%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_header%26allowNative%3Dfalse%26amznbid%3D2%26amznp%3D2%26lastRefreshEmpty%3Dtrue%26refresh_count%3D1%26lre_rc%3Dtrue_1%26sesspv_refresh%3D0_1%26tabVisibilityState%3Dhidden%26max_bid%3Dnone%26provider_performance%3D_chrome_10.00%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_1%26slotOnScreen%3Dfalse%26refreshOnScreen%3Dfalse&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=3029960922&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....y..xyr3^...8D.X.Qj..0....c:...j\|..."3Q..\...m...w...d...!Kj,...Y.`.~....]w.......c....I.;..+...Y...m.m67..tv.Ls...'0I.#.~.O.

Chrome Cache Entry: 599

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.0064864736201136
Encrypted:	false
SSDEEP:	3:CUQtxlHh/:u/
MD5:	455005E2F4B8ECC484500FAB08619F70
SHA1:	E1E297D7DFDBB59ED7FC2F175827D5BB4D00840B
SHA-256:	B2E4D08754839510A3D77DDF8205A515E51E4277C323932B10441196744CE757
SHA-512:	B64F465A0341A5B964760DE11F98B94EF91205922570D8D47F69C28A25E86CCF1B4A31A6646CE914D4BFD2B419C5F1F80B6A1ABB8E3CC6BE23871C1B2133B140
Malicious:	false
Reputation:	low
Preview:	GIF89a....p..!.......,...........D..;

Chrome Cache Entry: 600

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.737401412901155
Encrypted:	false
SSDEEP:	3:YxhA6rYBDzDknchVHChCNN7kYCiNQDxP4obs:YnTYfDknchtChEkYCiNQtP4b
MD5:	5FE82CCCED0572962B44C35805DCFE76
SHA1:	CC4EEC17F3C8F9094B29AAC255BAF3D5115A0527
SHA-256:	7A27634D646E6C98CBB2E91623C9E018347CE9D3BCAD26FACE54FEBE8E97D761
SHA-512:	F28639E06CA6CACD7C3167F9A3F7E28D45EB396046A6B92FE401D7792064308CD955F28A90AB1E3DC7FFBBFA76C12ABE36295C18D9665CBA2C078CB60591E904
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=prebid&fmt=json
Preview:	{"TDID":"419fdeb2-d93b-4065-8361-053e6f939d20","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-05-21T09:22:16"}

Chrome Cache Entry: 601

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	223
Entropy (8bit):	4.822702876401596
Encrypted:	false
SSDEEP:	6:YWQmh7HApgXC/pa2hHJN+Vtcv6Vmd4uSNJmdfvVmd4L:YWdUpg8hHJAw6Vc2eZVcM
MD5:	229A0EC7262438E71450F073006D217B
SHA1:	924E64FF74F88F905A792E26AF10FA90EC15A91E
SHA-256:	45141EFF76647780877F677277026190D49540C36E2B1E415E2AAB1179F3520A
SHA-512:	A7FE0E0826836CB6B980C825EF68B154FB65559A07161AD6798E55C265A90ED904E4BA236AFC96F992949B12175CA1CAB7150FD6D04254347C52BA5805A20AAA
Malicious:	false
Reputation:	low
Preview:	{"succeeded":true,"data":{"eids":[{"source":"indexexchange.com","uids":[{"id":"ZkxnuNHM6HMAAHezAHb..QAA&983","ext":{"stype":"ppuid"}}]},{"source":"adnxs.com","uids":[{"id":"6403784576581203868","ext":{"stype":"ppuid"}}]}]}}

Chrome Cache Entry: 602

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	6.555885946777543
Encrypted:	false
SSDEEP:	3:McNM9F0ffrVyzHz9zzssS/6bB8tfrC+cGdkcIozD1ul3yRu:L8OffszxzAsWwKJr3DzR0J
MD5:	97CF08203D9E43601A86F65CC7177CF9
SHA1:	47A7D7523320729CDB253A87D5E79BDBFE75C7C8
SHA-256:	23BA33400CA1ACE83382519FAD17CCA9AA8427800A4A28210856345C8E62AD71
SHA-512:	237A6E39547E7F86BF01D3B45D025BDE936FBCE6552CFB7BB27F451C0B550050C85F9BBFE03D33A81550946B62BAFD4A795FB212D9C6C83BBF5845BFEF6C59AE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2949842293114534&correlator=1677919909247715&eid=31079956%2C31081683%2C31083341%2C31081560%2C31061691%2C31061692%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=2&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283342234&lmt=1715994881&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&rumc=2949842293114534&rume=1&vis=1&psz=728x-1&msz=728x-1&fws=512&ohw=0&ga_vid=1430325693.1716283288&ga_sid=1716283342&ga_hid=595633438&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkNS1zeW5jLmNvbRJESUQ1KlZKbFVvME1OMUlXQmI5c0NmeVExSmp5UjU5RU81TWtiam5wODh6QkhDRHlnTkRWRkYtemlqdVRHbFA0WTBSOEtYARI0CgpwdWJjaWQub3JnEiQ1NTA5NmI2NS02YzI1LTQyZGEtYWE5Zi1jMTM2MGFiN2Q3NjJYARIZCgp1aWRhcGkuY29tGN6W09P5MUgAUgIIZBIcCg1jcndkY250cmwubmV0GK-i09P5MUgAUgIIbQ..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716283328555&idt=11441&ppid=55096b65-6c25-42da-aa9f-c1360ab7d762&prev_scp=pos%3D2%26monu%3D728x90_B2%26slotNum%3D1%26placementNum%3D1%26directDeals%3Dsticky_bottom%26allowNative%3Dfalse%26bidder_responseTime%3Dkueezrtb_1200%26auction_id%3D5387408d-3730-4c79-9816-6d5f714757f8%26monu_df%3D0.08%26safeframe%3Dfalse%26bid_source%3Dclient%26hb_format%3Dbanner%26hb_pb%3D0.08%26hb_size%3D728x90%26hb_adid%3D204d80d11d5f76ba%26hb_bidder%3Dkueezrtb%26lastRefreshEmpty%3Dfalse%26refresh_count%3D0%26lre_rc%3Dfalse_0%26sesspv_refresh%3D0_0%26tabVisibilityState%3Dvisible%26max_bid%3Ddf%26provider_performance%3Dkueezrtb_chrome_0.08%26context%3D9_NY_chrome%26browser_hour_refresh%3Dchrome_9_0%26slotOnScreen%3Dtrue&cust_params=page_num%3D0%26big4%3Dtrue%26browser%3Dchrome%26url%3Dcustommapposter.com%26referrer%3Ddirect%26infolinks%3Dtrue%26hem_included%3Dfalse%26tcf_gdprApplies%3Dfalse%26tcfBehavior%3DnotApplicable&adks=313124495&frm=20&eo_id_str=ID%3D5cfe142b98f72554%3AT%3D1716283300%3ART%3D1716283300%3AS%3DAA-AfjYgSEVDVFMN-TVHSqdxXFSC
Preview:	.....y..xyr3^...8D.X.Qj..0....c:...j\|..."3Q..\...m.6.w...d...!Kj,...Y.`.~....]w.......c....I.;..+.f.m...m.me..s:{\|...'..e.n..'.

Chrome Cache Entry: 603

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 605

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	5.015518803135403
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YCYkmd6E8hyXaMtqMrZOAYPqQyKoL:8WiIUemo/HPbfCYKpY4DowuqMr1YSoeD
MD5:	B5DD818013A5559B06C4BA3D1AAAF3B2
SHA1:	2313FB780AD0794A8617352E5A99E6D0249A3738
SHA-256:	09F786A6D156FD29C7D878F979AE105F618B43A2FEFA7534E9860DEDE02A7679
SHA-512:	9000F8B8BAED029106BAC9B3009BEC8D3B38BA1FA27352BE7A664C062FA420A3EDFA9E4ACA7C826A639DA93F8FC5C7D66A219B9007BDE51DAC29C40B5C4B7976
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&pid=UWOEZIhxdd1tM&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22id5%22%3A%22ID5*VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K%22%2C%22pubcommon%22%3A%2255096b65-6c25-42da-aa9f-c1360ab7d762%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 21, 2024 11:21:10.819900036 CEST	192.168.2.9	1.1.1.1	0x64b4	Standard query (0)	jaz.wxk.mybluehost.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:10.820348978 CEST	192.168.2.9	1.1.1.1	0x8e7c	Standard query (0)	jaz.wxk.mybluehost.me	65	IN (0x0001)	false
May 21, 2024 11:21:11.765918970 CEST	192.168.2.9	1.1.1.1	0x9cc6	Standard query (0)	www.swisspass.ch	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:11.766438007 CEST	192.168.2.9	1.1.1.1	0x2669	Standard query (0)	www.swisspass.ch	65	IN (0x0001)	false
May 21, 2024 11:21:12.229379892 CEST	192.168.2.9	1.1.1.1	0xf190	Standard query (0)	cdn.app.sbb.ch	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:12.230283022 CEST	192.168.2.9	1.1.1.1	0xd98b	Standard query (0)	cdn.app.sbb.ch	65	IN (0x0001)	false
May 21, 2024 11:21:13.121500969 CEST	192.168.2.9	1.1.1.1	0x3ec6	Standard query (0)	www.swisspass.ch	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:13.121922016 CEST	192.168.2.9	1.1.1.1	0x1ab7	Standard query (0)	www.swisspass.ch	65	IN (0x0001)	false
May 21, 2024 11:21:13.679995060 CEST	192.168.2.9	1.1.1.1	0x39a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:13.680164099 CEST	192.168.2.9	1.1.1.1	0x6a2d	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 21, 2024 11:21:14.377115965 CEST	192.168.2.9	1.1.1.1	0x46f1	Standard query (0)	jaz.wxk.mybluehost.me	65	IN (0x0001)	false
May 21, 2024 11:21:14.377115965 CEST	192.168.2.9	1.1.1.1	0x3c5	Standard query (0)	jaz.wxk.mybluehost.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:23.640832901 CEST	192.168.2.9	1.1.1.1	0x8e24	Standard query (0)	corporatedefenseetl.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:23.641263962 CEST	192.168.2.9	1.1.1.1	0x8e34	Standard query (0)	corporatedefenseetl.com	65	IN (0x0001)	false
May 21, 2024 11:21:25.634279013 CEST	192.168.2.9	1.1.1.1	0x22b5	Standard query (0)	custommapposter.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:25.634864092 CEST	192.168.2.9	1.1.1.1	0x4673	Standard query (0)	custommapposter.com	65	IN (0x0001)	false
May 21, 2024 11:21:26.443784952 CEST	192.168.2.9	1.1.1.1	0x9786	Standard query (0)	monu.delivery	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:26.444029093 CEST	192.168.2.9	1.1.1.1	0xeab1	Standard query (0)	monu.delivery	65	IN (0x0001)	false
May 21, 2024 11:21:28.819618940 CEST	192.168.2.9	1.1.1.1	0xa15	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:28.819794893 CEST	192.168.2.9	1.1.1.1	0xdbbf	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
May 21, 2024 11:21:29.449862003 CEST	192.168.2.9	1.1.1.1	0xc36a	Standard query (0)	custommapposter.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:29.450139999 CEST	192.168.2.9	1.1.1.1	0xf715	Standard query (0)	custommapposter.com	65	IN (0x0001)	false
May 21, 2024 11:21:29.670320988 CEST	192.168.2.9	1.1.1.1	0xddab	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:29.670886993 CEST	192.168.2.9	1.1.1.1	0xaaff	Standard query (0)	api.grow.me	65	IN (0x0001)	false
May 21, 2024 11:21:29.840382099 CEST	192.168.2.9	1.1.1.1	0xb101	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:29.840590000 CEST	192.168.2.9	1.1.1.1	0x4b2a	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:21:29.873091936 CEST	192.168.2.9	1.1.1.1	0x911d	Standard query (0)	monu.delivery	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:29.873312950 CEST	192.168.2.9	1.1.1.1	0xbf13	Standard query (0)	monu.delivery	65	IN (0x0001)	false
May 21, 2024 11:21:30.744489908 CEST	192.168.2.9	1.1.1.1	0xd82d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.744641066 CEST	192.168.2.9	1.1.1.1	0xf8f2	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:21:30.744983912 CEST	192.168.2.9	1.1.1.1	0x166e	Standard query (0)	cdn.confiant-integrations.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.745105982 CEST	192.168.2.9	1.1.1.1	0x9858	Standard query (0)	cdn.confiant-integrations.net	65	IN (0x0001)	false
May 21, 2024 11:21:30.747272015 CEST	192.168.2.9	1.1.1.1	0x8bce	Standard query (0)	static.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.747437954 CEST	192.168.2.9	1.1.1.1	0xbb8e	Standard query (0)	static.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.752538919 CEST	192.168.2.9	1.1.1.1	0xee5e	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.753081083 CEST	192.168.2.9	1.1.1.1	0xafca	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.754057884 CEST	192.168.2.9	1.1.1.1	0x8010	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.754230976 CEST	192.168.2.9	1.1.1.1	0x1edd	Standard query (0)	api.grow.me	65	IN (0x0001)	false
May 21, 2024 11:21:30.759594917 CEST	192.168.2.9	1.1.1.1	0x4852	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.759753942 CEST	192.168.2.9	1.1.1.1	0xab8b	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 21, 2024 11:21:30.770900011 CEST	192.168.2.9	1.1.1.1	0x58b	Standard query (0)	api.id5-sync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.771342993 CEST	192.168.2.9	1.1.1.1	0x8293	Standard query (0)	api.id5-sync.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.890080929 CEST	192.168.2.9	1.1.1.1	0xf46e	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.890398026 CEST	192.168.2.9	1.1.1.1	0xaa3	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.920097113 CEST	192.168.2.9	1.1.1.1	0x15a9	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.920311928 CEST	192.168.2.9	1.1.1.1	0x39b2	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.921390057 CEST	192.168.2.9	1.1.1.1	0x6b80	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.921513081 CEST	192.168.2.9	1.1.1.1	0x531e	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.922152042 CEST	192.168.2.9	1.1.1.1	0x216f	Standard query (0)	exchange.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.922537088 CEST	192.168.2.9	1.1.1.1	0xb749	Standard query (0)	exchange.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.923187017 CEST	192.168.2.9	1.1.1.1	0xe9ae	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.923335075 CEST	192.168.2.9	1.1.1.1	0xb153	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 21, 2024 11:21:30.924663067 CEST	192.168.2.9	1.1.1.1	0xce03	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.925034046 CEST	192.168.2.9	1.1.1.1	0xd6b6	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.926438093 CEST	192.168.2.9	1.1.1.1	0x84be	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.926611900 CEST	192.168.2.9	1.1.1.1	0xe643	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
May 21, 2024 11:21:30.928046942 CEST	192.168.2.9	1.1.1.1	0xd455	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.928385019 CEST	192.168.2.9	1.1.1.1	0x13df	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:21:30.930648088 CEST	192.168.2.9	1.1.1.1	0xdd30	Standard query (0)	hb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.930830956 CEST	192.168.2.9	1.1.1.1	0x5b08	Standard query (0)	hb.minutemedia-prebid.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.934633970 CEST	192.168.2.9	1.1.1.1	0x9209	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.934772015 CEST	192.168.2.9	1.1.1.1	0xfe52	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.936300039 CEST	192.168.2.9	1.1.1.1	0xee	Standard query (0)	prebid.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.936534882 CEST	192.168.2.9	1.1.1.1	0x5b12	Standard query (0)	prebid.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.940485954 CEST	192.168.2.9	1.1.1.1	0x6000	Standard query (0)	e.serverbid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.940681934 CEST	192.168.2.9	1.1.1.1	0x8ce8	Standard query (0)	e.serverbid.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.941549063 CEST	192.168.2.9	1.1.1.1	0x4a0b	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.941709995 CEST	192.168.2.9	1.1.1.1	0xf5ee	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.942591906 CEST	192.168.2.9	1.1.1.1	0xe70a	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.942739010 CEST	192.168.2.9	1.1.1.1	0x778d	Standard query (0)	hb-api.omnitagjs.com	65	IN (0x0001)	false
May 21, 2024 11:21:30.967736006 CEST	192.168.2.9	1.1.1.1	0xa56c	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.968027115 CEST	192.168.2.9	1.1.1.1	0x6a0b	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
May 21, 2024 11:21:31.066057920 CEST	192.168.2.9	1.1.1.1	0x6ec4	Standard query (0)	imps.monu.delivery	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.066257954 CEST	192.168.2.9	1.1.1.1	0x9761	Standard query (0)	imps.monu.delivery	65	IN (0x0001)	false
May 21, 2024 11:21:31.550323963 CEST	192.168.2.9	1.1.1.1	0x3183	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.550484896 CEST	192.168.2.9	1.1.1.1	0xd104	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 21, 2024 11:21:31.674025059 CEST	192.168.2.9	1.1.1.1	0xadd2	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.674561024 CEST	192.168.2.9	1.1.1.1	0xad37	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
May 21, 2024 11:21:31.718900919 CEST	192.168.2.9	1.1.1.1	0x9a93	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.719216108 CEST	192.168.2.9	1.1.1.1	0x3f9b	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
May 21, 2024 11:21:31.744656086 CEST	192.168.2.9	1.1.1.1	0x4b40	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.744920015 CEST	192.168.2.9	1.1.1.1	0xca15	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
May 21, 2024 11:21:31.775333881 CEST	192.168.2.9	1.1.1.1	0x56bf	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.775492907 CEST	192.168.2.9	1.1.1.1	0xe88e	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
May 21, 2024 11:21:31.777924061 CEST	192.168.2.9	1.1.1.1	0x2568	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.778068066 CEST	192.168.2.9	1.1.1.1	0xb5cd	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 21, 2024 11:21:31.782471895 CEST	192.168.2.9	1.1.1.1	0xd5e4	Standard query (0)	imps.monu.delivery	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.782614946 CEST	192.168.2.9	1.1.1.1	0x7943	Standard query (0)	imps.monu.delivery	65	IN (0x0001)	false
May 21, 2024 11:21:31.784861088 CEST	192.168.2.9	1.1.1.1	0xff30	Standard query (0)	api.id5-sync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.785310984 CEST	192.168.2.9	1.1.1.1	0x2da0	Standard query (0)	api.id5-sync.com	65	IN (0x0001)	false
May 21, 2024 11:21:31.898753881 CEST	192.168.2.9	1.1.1.1	0x4617	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.898891926 CEST	192.168.2.9	1.1.1.1	0xdc08	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:21:31.915786982 CEST	192.168.2.9	1.1.1.1	0x4636	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.915919065 CEST	192.168.2.9	1.1.1.1	0x9727	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.124592066 CEST	192.168.2.9	1.1.1.1	0xc1c4	Standard query (0)	exchange.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.125158072 CEST	192.168.2.9	1.1.1.1	0x5402	Standard query (0)	exchange.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.364401102 CEST	192.168.2.9	1.1.1.1	0x4a0a	Standard query (0)	track.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.364746094 CEST	192.168.2.9	1.1.1.1	0xd0cb	Standard query (0)	track.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.365106106 CEST	192.168.2.9	1.1.1.1	0x6fec	Standard query (0)	gtrack.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.365266085 CEST	192.168.2.9	1.1.1.1	0xf8ed	Standard query (0)	gtrack.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.366624117 CEST	192.168.2.9	1.1.1.1	0xe08	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.366760015 CEST	192.168.2.9	1.1.1.1	0x3d6	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.367180109 CEST	192.168.2.9	1.1.1.1	0x92ed	Standard query (0)	client.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.367362022 CEST	192.168.2.9	1.1.1.1	0x7fbb	Standard query (0)	client.aps.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.367721081 CEST	192.168.2.9	1.1.1.1	0x5399	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.367851019 CEST	192.168.2.9	1.1.1.1	0x58dd	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
May 21, 2024 11:21:32.746850014 CEST	192.168.2.9	1.1.1.1	0x2047	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.747039080 CEST	192.168.2.9	1.1.1.1	0xe829	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.872522116 CEST	192.168.2.9	1.1.1.1	0xa2b3	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.872654915 CEST	192.168.2.9	1.1.1.1	0x8c20	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.895845890 CEST	192.168.2.9	1.1.1.1	0xe555	Standard query (0)	hb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.896157980 CEST	192.168.2.9	1.1.1.1	0x4443	Standard query (0)	hb.minutemedia-prebid.com	65	IN (0x0001)	false
May 21, 2024 11:21:32.988435984 CEST	192.168.2.9	1.1.1.1	0xcb16	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.988567114 CEST	192.168.2.9	1.1.1.1	0xa099	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
May 21, 2024 11:21:33.058504105 CEST	192.168.2.9	1.1.1.1	0x8e60	Standard query (0)	prebid.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.058840990 CEST	192.168.2.9	1.1.1.1	0x4305	Standard query (0)	prebid.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:21:33.068856955 CEST	192.168.2.9	1.1.1.1	0x1b8c	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.069108963 CEST	192.168.2.9	1.1.1.1	0x9ce4	Standard query (0)	hb-api.omnitagjs.com	65	IN (0x0001)	false
May 21, 2024 11:21:33.114563942 CEST	192.168.2.9	1.1.1.1	0x8c78	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.114737034 CEST	192.168.2.9	1.1.1.1	0x5a87	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:21:33.263453960 CEST	192.168.2.9	1.1.1.1	0xd695	Standard query (0)	u.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.263935089 CEST	192.168.2.9	1.1.1.1	0xf228	Standard query (0)	u.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:33.446289062 CEST	192.168.2.9	1.1.1.1	0xc83f	Standard query (0)	app.grow.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.446460962 CEST	192.168.2.9	1.1.1.1	0x4d5c	Standard query (0)	app.grow.me	65	IN (0x0001)	false
May 21, 2024 11:21:33.458188057 CEST	192.168.2.9	1.1.1.1	0xf3de	Standard query (0)	some.growplow.events	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.458409071 CEST	192.168.2.9	1.1.1.1	0x441a	Standard query (0)	some.growplow.events	65	IN (0x0001)	false
May 21, 2024 11:21:33.856436014 CEST	192.168.2.9	1.1.1.1	0xc859	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.857398987 CEST	192.168.2.9	1.1.1.1	0xdd46	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:33.877388954 CEST	192.168.2.9	1.1.1.1	0x366	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.877897024 CEST	192.168.2.9	1.1.1.1	0xb8dc	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:34.343033075 CEST	192.168.2.9	1.1.1.1	0xd5b4	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:34.343702078 CEST	192.168.2.9	1.1.1.1	0x4fc6	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.413846016 CEST	192.168.2.9	1.1.1.1	0x42b2	Standard query (0)	sync.serverbid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.414078951 CEST	192.168.2.9	1.1.1.1	0xe773	Standard query (0)	sync.serverbid.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.416650057 CEST	192.168.2.9	1.1.1.1	0x865a	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.419218063 CEST	192.168.2.9	1.1.1.1	0xef3d	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.419819117 CEST	192.168.2.9	1.1.1.1	0x8dd7	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.420020103 CEST	192.168.2.9	1.1.1.1	0x60a4	Standard query (0)	sync.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:21:35.421036005 CEST	192.168.2.9	1.1.1.1	0xfcb	Standard query (0)	sync.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.421413898 CEST	192.168.2.9	1.1.1.1	0xdba3	Standard query (0)	sync.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.422034979 CEST	192.168.2.9	1.1.1.1	0x7d23	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.422240019 CEST	192.168.2.9	1.1.1.1	0xc4dc	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.423754930 CEST	192.168.2.9	1.1.1.1	0xa0aa	Standard query (0)	sync.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.424241066 CEST	192.168.2.9	1.1.1.1	0x2447	Standard query (0)	sync.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.425194025 CEST	192.168.2.9	1.1.1.1	0x9ed7	Standard query (0)	cs.seedtag.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.425482988 CEST	192.168.2.9	1.1.1.1	0x60a4	Standard query (0)	cs.seedtag.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.666151047 CEST	192.168.2.9	1.1.1.1	0x776a	Standard query (0)	bloggernetwork-d.openx.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.666409969 CEST	192.168.2.9	1.1.1.1	0xef17	Standard query (0)	bloggernetwork-d.openx.net	65	IN (0x0001)	false
May 21, 2024 11:21:35.666721106 CEST	192.168.2.9	1.1.1.1	0x2145	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.666831017 CEST	192.168.2.9	1.1.1.1	0x39f7	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 21, 2024 11:21:35.667078018 CEST	192.168.2.9	1.1.1.1	0xde80	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.667218924 CEST	192.168.2.9	1.1.1.1	0x929b	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.897027016 CEST	192.168.2.9	1.1.1.1	0x7379	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.897216082 CEST	192.168.2.9	1.1.1.1	0xe686	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 21, 2024 11:21:35.898564100 CEST	192.168.2.9	1.1.1.1	0xbcf6	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
May 21, 2024 11:21:35.898564100 CEST	192.168.2.9	1.1.1.1	0x806a	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:36.427858114 CEST	192.168.2.9	1.1.1.1	0xe795	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:36.430769920 CEST	192.168.2.9	1.1.1.1	0xf636	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 21, 2024 11:21:39.123495102 CEST	192.168.2.9	1.1.1.1	0xb19c	Standard query (0)	u.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.123634100 CEST	192.168.2.9	1.1.1.1	0x1d1e	Standard query (0)	u.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:21:39.128184080 CEST	192.168.2.9	1.1.1.1	0xe988	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.128417015 CEST	192.168.2.9	1.1.1.1	0x29c	Standard query (0)	btloader.com	65	IN (0x0001)	false
May 21, 2024 11:21:39.132869959 CEST	192.168.2.9	1.1.1.1	0x1ca7	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.133032084 CEST	192.168.2.9	1.1.1.1	0x40f7	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:39.133769989 CEST	192.168.2.9	1.1.1.1	0xa6ca	Standard query (0)	cdn.id5-sync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.134172916 CEST	192.168.2.9	1.1.1.1	0x91af	Standard query (0)	cdn.id5-sync.com	65	IN (0x0001)	false
May 21, 2024 11:21:39.134879112 CEST	192.168.2.9	1.1.1.1	0x66f2	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.135299921 CEST	192.168.2.9	1.1.1.1	0x7e12	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:21:39.164603949 CEST	192.168.2.9	1.1.1.1	0xdf62	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.164731979 CEST	192.168.2.9	1.1.1.1	0xac31	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
May 21, 2024 11:21:39.191622019 CEST	192.168.2.9	1.1.1.1	0x66e7	Standard query (0)	cdn.prod.uidapi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.191919088 CEST	192.168.2.9	1.1.1.1	0xd0c3	Standard query (0)	cdn.prod.uidapi.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.701982975 CEST	192.168.2.9	1.1.1.1	0x32c5	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.702184916 CEST	192.168.2.9	1.1.1.1	0xc7ca	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.707447052 CEST	192.168.2.9	1.1.1.1	0xf6b6	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.707636118 CEST	192.168.2.9	1.1.1.1	0x94ef	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.708389044 CEST	192.168.2.9	1.1.1.1	0x542a	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.708553076 CEST	192.168.2.9	1.1.1.1	0xc20e	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.709089041 CEST	192.168.2.9	1.1.1.1	0x7d15	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.709235907 CEST	192.168.2.9	1.1.1.1	0x805e	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.709603071 CEST	192.168.2.9	1.1.1.1	0x5e22	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.709830046 CEST	192.168.2.9	1.1.1.1	0xb8d4	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.710138083 CEST	192.168.2.9	1.1.1.1	0x8243	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.710659981 CEST	192.168.2.9	1.1.1.1	0xfc2e	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.711886883 CEST	192.168.2.9	1.1.1.1	0xdb5c	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.712034941 CEST	192.168.2.9	1.1.1.1	0x82e6	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 21, 2024 11:21:41.712766886 CEST	192.168.2.9	1.1.1.1	0x46e0	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.712913036 CEST	192.168.2.9	1.1.1.1	0x761b	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 21, 2024 11:21:41.713449001 CEST	192.168.2.9	1.1.1.1	0xe3c1	Standard query (0)	sync.richaudience.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.713586092 CEST	192.168.2.9	1.1.1.1	0x3669	Standard query (0)	sync.richaudience.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.714277983 CEST	192.168.2.9	1.1.1.1	0xdda	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.714420080 CEST	192.168.2.9	1.1.1.1	0xeab9	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.715589046 CEST	192.168.2.9	1.1.1.1	0xd833	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.715728998 CEST	192.168.2.9	1.1.1.1	0x158b	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.716516018 CEST	192.168.2.9	1.1.1.1	0xd218	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.716711998 CEST	192.168.2.9	1.1.1.1	0x5e05	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.717307091 CEST	192.168.2.9	1.1.1.1	0xbdab	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.717561960 CEST	192.168.2.9	1.1.1.1	0x9a84	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.717868090 CEST	192.168.2.9	1.1.1.1	0xe063	Standard query (0)	csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.718281984 CEST	192.168.2.9	1.1.1.1	0xd13	Standard query (0)	csync.smartadserver.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.719805956 CEST	192.168.2.9	1.1.1.1	0xf17d	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.719958067 CEST	192.168.2.9	1.1.1.1	0xfe3e	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.721405983 CEST	192.168.2.9	1.1.1.1	0x1b58	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.721745968 CEST	192.168.2.9	1.1.1.1	0xeccf	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.722084999 CEST	192.168.2.9	1.1.1.1	0xfc2f	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.722472906 CEST	192.168.2.9	1.1.1.1	0x2a11	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.722789049 CEST	192.168.2.9	1.1.1.1	0xc05a	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.723463058 CEST	192.168.2.9	1.1.1.1	0xf577	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.723839045 CEST	192.168.2.9	1.1.1.1	0xe209	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724854946 CEST	192.168.2.9	1.1.1.1	0x216f	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
May 21, 2024 11:21:41.726149082 CEST	192.168.2.9	1.1.1.1	0x4ba0	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.726291895 CEST	192.168.2.9	1.1.1.1	0x924d	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
May 21, 2024 11:21:41.727029085 CEST	192.168.2.9	1.1.1.1	0x1021	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727396011 CEST	192.168.2.9	1.1.1.1	0xb595	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
May 21, 2024 11:21:41.728661060 CEST	192.168.2.9	1.1.1.1	0xc36e	Standard query (0)	ads.us.e-planning.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.729249001 CEST	192.168.2.9	1.1.1.1	0x9007	Standard query (0)	ads.us.e-planning.net	65	IN (0x0001)	false
May 21, 2024 11:21:41.729701996 CEST	192.168.2.9	1.1.1.1	0xf555	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.729844093 CEST	192.168.2.9	1.1.1.1	0xd4b1	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 21, 2024 11:21:41.738940001 CEST	192.168.2.9	1.1.1.1	0x8cd7	Standard query (0)	1x1.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.739506006 CEST	192.168.2.9	1.1.1.1	0x60f4	Standard query (0)	1x1.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:21:41.908143997 CEST	192.168.2.9	1.1.1.1	0xe8c7	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.908322096 CEST	192.168.2.9	1.1.1.1	0xba9	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
May 21, 2024 11:21:42.035569906 CEST	192.168.2.9	1.1.1.1	0xb132	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.035824060 CEST	192.168.2.9	1.1.1.1	0xc6b9	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
May 21, 2024 11:21:42.037117004 CEST	192.168.2.9	1.1.1.1	0x93ae	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.037363052 CEST	192.168.2.9	1.1.1.1	0xfcb1	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
May 21, 2024 11:21:42.040616035 CEST	192.168.2.9	1.1.1.1	0xe260	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.040860891 CEST	192.168.2.9	1.1.1.1	0xf52e	Standard query (0)	u.openx.net	65	IN (0x0001)	false
May 21, 2024 11:21:42.066891909 CEST	192.168.2.9	1.1.1.1	0x973d	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.067039013 CEST	192.168.2.9	1.1.1.1	0x8cdf	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
May 21, 2024 11:21:42.067697048 CEST	192.168.2.9	1.1.1.1	0x7aec	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.067764997 CEST	192.168.2.9	1.1.1.1	0xf51b	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
May 21, 2024 11:21:42.068030119 CEST	192.168.2.9	1.1.1.1	0x1524	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.068160057 CEST	192.168.2.9	1.1.1.1	0x8070	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
May 21, 2024 11:21:42.068595886 CEST	192.168.2.9	1.1.1.1	0x5e5f	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.068783998 CEST	192.168.2.9	1.1.1.1	0x265c	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.204521894 CEST	192.168.2.9	1.1.1.1	0xc49f	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.205960989 CEST	192.168.2.9	1.1.1.1	0x57c1	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.207314968 CEST	192.168.2.9	1.1.1.1	0x4019	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.207727909 CEST	192.168.2.9	1.1.1.1	0x476	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.354051113 CEST	192.168.2.9	1.1.1.1	0xcf23	Standard query (0)	api.intentiq.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.354211092 CEST	192.168.2.9	1.1.1.1	0xf771	Standard query (0)	api.intentiq.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.355313063 CEST	192.168.2.9	1.1.1.1	0x789e	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.355536938 CEST	192.168.2.9	1.1.1.1	0x80dd	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.457180023 CEST	192.168.2.9	1.1.1.1	0x1fa	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.457660913 CEST	192.168.2.9	1.1.1.1	0x211c	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.584939957 CEST	192.168.2.9	1.1.1.1	0xaaa0	Standard query (0)	video.primis.tech	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.585078001 CEST	192.168.2.9	1.1.1.1	0x4041	Standard query (0)	video.primis.tech	65	IN (0x0001)	false
May 21, 2024 11:21:44.831309080 CEST	192.168.2.9	1.1.1.1	0x76a4	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.831592083 CEST	192.168.2.9	1.1.1.1	0x8c15	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.835338116 CEST	192.168.2.9	1.1.1.1	0xce80	Standard query (0)	api-2-0.spot.im	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.835588932 CEST	192.168.2.9	1.1.1.1	0x88e7	Standard query (0)	api-2-0.spot.im	65	IN (0x0001)	false
May 21, 2024 11:21:44.862759113 CEST	192.168.2.9	1.1.1.1	0x477b	Standard query (0)	gum.aidemsrv.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.863109112 CEST	192.168.2.9	1.1.1.1	0xe3f	Standard query (0)	gum.aidemsrv.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.931945086 CEST	192.168.2.9	1.1.1.1	0x18af	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.932092905 CEST	192.168.2.9	1.1.1.1	0x7ad0	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.933099031 CEST	192.168.2.9	1.1.1.1	0x4445	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.933254957 CEST	192.168.2.9	1.1.1.1	0x8f80	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.934223890 CEST	192.168.2.9	1.1.1.1	0xa63f	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.934353113 CEST	192.168.2.9	1.1.1.1	0x1259	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
May 21, 2024 11:21:44.934828997 CEST	192.168.2.9	1.1.1.1	0x5e73	Standard query (0)	cs-server-s2s.yellowblue.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.934952974 CEST	192.168.2.9	1.1.1.1	0xf8fb	Standard query (0)	cs-server-s2s.yellowblue.io	65	IN (0x0001)	false
May 21, 2024 11:21:45.010380030 CEST	192.168.2.9	1.1.1.1	0xa7f	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.010606050 CEST	192.168.2.9	1.1.1.1	0x2c5b	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.011163950 CEST	192.168.2.9	1.1.1.1	0x97a7	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.011352062 CEST	192.168.2.9	1.1.1.1	0x30e9	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.011708975 CEST	192.168.2.9	1.1.1.1	0x2f7	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.011837959 CEST	192.168.2.9	1.1.1.1	0x7b4	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.029725075 CEST	192.168.2.9	1.1.1.1	0x9e9d	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.029879093 CEST	192.168.2.9	1.1.1.1	0x1a8	Standard query (0)	bttrack.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.083097935 CEST	192.168.2.9	1.1.1.1	0x35ce	Standard query (0)	player.aniview.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.083228111 CEST	192.168.2.9	1.1.1.1	0x93f1	Standard query (0)	player.aniview.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.114016056 CEST	192.168.2.9	1.1.1.1	0xb61b	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.114298105 CEST	192.168.2.9	1.1.1.1	0x4938	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.414622068 CEST	192.168.2.9	1.1.1.1	0x7166	Standard query (0)	d3div1mtym39ic.cloudfront.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.414963961 CEST	192.168.2.9	1.1.1.1	0xf0eb	Standard query (0)	d3div1mtym39ic.cloudfront.net	65	IN (0x0001)	false
May 21, 2024 11:21:45.468252897 CEST	192.168.2.9	1.1.1.1	0x2a1c	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.468561888 CEST	192.168.2.9	1.1.1.1	0x2c3b	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:21:45.518570900 CEST	192.168.2.9	1.1.1.1	0x36cf	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.518822908 CEST	192.168.2.9	1.1.1.1	0xca05	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.524171114 CEST	192.168.2.9	1.1.1.1	0x8e93	Standard query (0)	e.serverbid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.524450064 CEST	192.168.2.9	1.1.1.1	0x274c	Standard query (0)	e.serverbid.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.596576929 CEST	192.168.2.9	1.1.1.1	0xd0f2	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.598764896 CEST	192.168.2.9	1.1.1.1	0x5a4f	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:21:45.694060087 CEST	192.168.2.9	1.1.1.1	0x36d4	Standard query (0)	www.swisspass.ch	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.696739912 CEST	192.168.2.9	1.1.1.1	0xd4e0	Standard query (0)	www.swisspass.ch	65	IN (0x0001)	false
May 21, 2024 11:21:45.711647987 CEST	192.168.2.9	1.1.1.1	0x223	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.711878061 CEST	192.168.2.9	1.1.1.1	0xa048	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.158001900 CEST	192.168.2.9	1.1.1.1	0x8c82	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.158556938 CEST	192.168.2.9	1.1.1.1	0x8e0e	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.188225985 CEST	192.168.2.9	1.1.1.1	0xf436	Standard query (0)	resources.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.188503981 CEST	192.168.2.9	1.1.1.1	0x3995	Standard query (0)	resources.infolinks.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.249039888 CEST	192.168.2.9	1.1.1.1	0xe098	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.249360085 CEST	192.168.2.9	1.1.1.1	0x9073	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.392180920 CEST	192.168.2.9	1.1.1.1	0x49f7	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.392330885 CEST	192.168.2.9	1.1.1.1	0xfcad	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.450320005 CEST	192.168.2.9	1.1.1.1	0x77f6	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.450505972 CEST	192.168.2.9	1.1.1.1	0x7729	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.630712986 CEST	192.168.2.9	1.1.1.1	0x14be	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.630947113 CEST	192.168.2.9	1.1.1.1	0xc6e9	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.635976076 CEST	192.168.2.9	1.1.1.1	0xfdcf	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.636121988 CEST	192.168.2.9	1.1.1.1	0x2185	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.694009066 CEST	192.168.2.9	1.1.1.1	0xbbc0	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.695211887 CEST	192.168.2.9	1.1.1.1	0x2c18	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.851911068 CEST	192.168.2.9	1.1.1.1	0x217b	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.852034092 CEST	192.168.2.9	1.1.1.1	0x5310	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
May 21, 2024 11:21:46.876256943 CEST	192.168.2.9	1.1.1.1	0xc128	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.876399040 CEST	192.168.2.9	1.1.1.1	0x9072	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
May 21, 2024 11:21:47.165050983 CEST	192.168.2.9	1.1.1.1	0x3679	Standard query (0)	d5p.de17a.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.165211916 CEST	192.168.2.9	1.1.1.1	0x2870	Standard query (0)	d5p.de17a.com	65	IN (0x0001)	false
May 21, 2024 11:21:47.302639961 CEST	192.168.2.9	1.1.1.1	0xadf6	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.302783966 CEST	192.168.2.9	1.1.1.1	0x8ec9	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
May 21, 2024 11:21:47.303352118 CEST	192.168.2.9	1.1.1.1	0x3cd	Standard query (0)	d27la2n6wh4qws.cloudfront.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.303664923 CEST	192.168.2.9	1.1.1.1	0xa9bc	Standard query (0)	d27la2n6wh4qws.cloudfront.net	65	IN (0x0001)	false
May 21, 2024 11:21:47.339684963 CEST	192.168.2.9	1.1.1.1	0x61e2	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.339989901 CEST	192.168.2.9	1.1.1.1	0x42a6	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
May 21, 2024 11:21:47.415621996 CEST	192.168.2.9	1.1.1.1	0x39f0	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.415976048 CEST	192.168.2.9	1.1.1.1	0x8bfb	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
May 21, 2024 11:21:47.450000048 CEST	192.168.2.9	1.1.1.1	0x2ac1	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.450143099 CEST	192.168.2.9	1.1.1.1	0xb388	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:47.605957031 CEST	192.168.2.9	1.1.1.1	0xc00	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.606208086 CEST	192.168.2.9	1.1.1.1	0x2a45	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:47.823987961 CEST	192.168.2.9	1.1.1.1	0x377c	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.824134111 CEST	192.168.2.9	1.1.1.1	0x3296	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
May 21, 2024 11:21:48.465965986 CEST	192.168.2.9	1.1.1.1	0xfa06	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.466281891 CEST	192.168.2.9	1.1.1.1	0x73a5	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
May 21, 2024 11:21:48.495512962 CEST	192.168.2.9	1.1.1.1	0x7797	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.495713949 CEST	192.168.2.9	1.1.1.1	0xafd0	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
May 21, 2024 11:21:48.520241022 CEST	192.168.2.9	1.1.1.1	0x2895	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.524597883 CEST	192.168.2.9	1.1.1.1	0x289e	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
May 21, 2024 11:21:48.914279938 CEST	192.168.2.9	1.1.1.1	0x40f3	Standard query (0)	ws.rqtrk.eu	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.914664984 CEST	192.168.2.9	1.1.1.1	0xdefe	Standard query (0)	ws.rqtrk.eu	65	IN (0x0001)	false
May 21, 2024 11:21:49.018744946 CEST	192.168.2.9	1.1.1.1	0xb51e	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.019004107 CEST	192.168.2.9	1.1.1.1	0x606	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:21:49.021924019 CEST	192.168.2.9	1.1.1.1	0x3673	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.022423983 CEST	192.168.2.9	1.1.1.1	0xe8de	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 21, 2024 11:21:49.134804010 CEST	192.168.2.9	1.1.1.1	0xd120	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.135329962 CEST	192.168.2.9	1.1.1.1	0xe4e4	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 21, 2024 11:21:49.320307970 CEST	192.168.2.9	1.1.1.1	0x90f8	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.320764065 CEST	192.168.2.9	1.1.1.1	0xd040	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 21, 2024 11:21:49.609250069 CEST	192.168.2.9	1.1.1.1	0x5c28	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.609700918 CEST	192.168.2.9	1.1.1.1	0x1c3c	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
May 21, 2024 11:21:49.610469103 CEST	192.168.2.9	1.1.1.1	0xd87a	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.611088991 CEST	192.168.2.9	1.1.1.1	0xafe4	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
May 21, 2024 11:21:51.516438961 CEST	192.168.2.9	1.1.1.1	0xe4f9	Standard query (0)	cr.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:51.516592979 CEST	192.168.2.9	1.1.1.1	0x59ed	Standard query (0)	cr.frontend.weborama.fr	65	IN (0x0001)	false
May 21, 2024 11:21:51.909102917 CEST	192.168.2.9	1.1.1.1	0xa511	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:51.921849966 CEST	192.168.2.9	1.1.1.1	0xfc5	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 21, 2024 11:21:52.576448917 CEST	192.168.2.9	1.1.1.1	0xb86b	Standard query (0)	video.primis.tech	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:52.576797009 CEST	192.168.2.9	1.1.1.1	0x117c	Standard query (0)	video.primis.tech	65	IN (0x0001)	false
May 21, 2024 11:21:53.403855085 CEST	192.168.2.9	1.1.1.1	0xaa8b	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.404531956 CEST	192.168.2.9	1.1.1.1	0xbccb	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
May 21, 2024 11:21:53.406860113 CEST	192.168.2.9	1.1.1.1	0xd9b8	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.407146931 CEST	192.168.2.9	1.1.1.1	0x5864	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
May 21, 2024 11:21:53.413451910 CEST	192.168.2.9	1.1.1.1	0xb8d0	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.413626909 CEST	192.168.2.9	1.1.1.1	0xdf4c	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 21, 2024 11:21:53.416579962 CEST	192.168.2.9	1.1.1.1	0x2d49	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.417009115 CEST	192.168.2.9	1.1.1.1	0x517b	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
May 21, 2024 11:21:53.417999029 CEST	192.168.2.9	1.1.1.1	0x7dba	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.418761969 CEST	192.168.2.9	1.1.1.1	0x66aa	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
May 21, 2024 11:21:53.419646978 CEST	192.168.2.9	1.1.1.1	0x65f9	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.420345068 CEST	192.168.2.9	1.1.1.1	0xc0a7	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
May 21, 2024 11:21:53.425904036 CEST	192.168.2.9	1.1.1.1	0x4d97	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.426127911 CEST	192.168.2.9	1.1.1.1	0x9c15	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 21, 2024 11:21:53.684989929 CEST	192.168.2.9	1.1.1.1	0x4c52	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.685286045 CEST	192.168.2.9	1.1.1.1	0xc295	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
May 21, 2024 11:21:53.686054945 CEST	192.168.2.9	1.1.1.1	0x2023	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.686327934 CEST	192.168.2.9	1.1.1.1	0x4327	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
May 21, 2024 11:21:53.873209000 CEST	192.168.2.9	1.1.1.1	0x22fc	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.873676062 CEST	192.168.2.9	1.1.1.1	0xf4a4	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
May 21, 2024 11:21:55.164602995 CEST	192.168.2.9	1.1.1.1	0xe5f8	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.165096998 CEST	192.168.2.9	1.1.1.1	0xd629	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:55.546966076 CEST	192.168.2.9	1.1.1.1	0xabb1	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.547152042 CEST	192.168.2.9	1.1.1.1	0x6cb5	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:55.664858103 CEST	192.168.2.9	1.1.1.1	0x75f6	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.665000916 CEST	192.168.2.9	1.1.1.1	0xb6b2	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
May 21, 2024 11:21:55.759067059 CEST	192.168.2.9	1.1.1.1	0x4ddd	Standard query (0)	green.erne.co	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.759244919 CEST	192.168.2.9	1.1.1.1	0x3383	Standard query (0)	green.erne.co	65	IN (0x0001)	false
May 21, 2024 11:21:55.869472027 CEST	192.168.2.9	1.1.1.1	0x60ec	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.869802952 CEST	192.168.2.9	1.1.1.1	0xe83c	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
May 21, 2024 11:21:56.216281891 CEST	192.168.2.9	1.1.1.1	0x7de4	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.216474056 CEST	192.168.2.9	1.1.1.1	0x30c6	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
May 21, 2024 11:21:56.223293066 CEST	192.168.2.9	1.1.1.1	0x1ce2	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.223587036 CEST	192.168.2.9	1.1.1.1	0xe3c6	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
May 21, 2024 11:21:56.517255068 CEST	192.168.2.9	1.1.1.1	0x14e6	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.517465115 CEST	192.168.2.9	1.1.1.1	0x81fa	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
May 21, 2024 11:21:56.755467892 CEST	192.168.2.9	1.1.1.1	0x393b	Standard query (0)	pixel-eu.onaudience.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.755692959 CEST	192.168.2.9	1.1.1.1	0x7ba0	Standard query (0)	pixel-eu.onaudience.com	65	IN (0x0001)	false
May 21, 2024 11:21:56.782094002 CEST	192.168.2.9	1.1.1.1	0x4a89	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.782236099 CEST	192.168.2.9	1.1.1.1	0xd1bf	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
May 21, 2024 11:21:56.824568987 CEST	192.168.2.9	1.1.1.1	0x1e74	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.824891090 CEST	192.168.2.9	1.1.1.1	0x2487	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 21, 2024 11:21:56.837177038 CEST	192.168.2.9	1.1.1.1	0xf06b	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.837495089 CEST	192.168.2.9	1.1.1.1	0xf9ff	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
May 21, 2024 11:21:57.482281923 CEST	192.168.2.9	1.1.1.1	0x1bfd	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.483496904 CEST	192.168.2.9	1.1.1.1	0x4426	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 21, 2024 11:21:57.484204054 CEST	192.168.2.9	1.1.1.1	0xe9bd	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.485217094 CEST	192.168.2.9	1.1.1.1	0x8cfe	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:57.486507893 CEST	192.168.2.9	1.1.1.1	0xedd8	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.486901999 CEST	192.168.2.9	1.1.1.1	0x3c55	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:57.548536062 CEST	192.168.2.9	1.1.1.1	0x4f7b	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.549202919 CEST	192.168.2.9	1.1.1.1	0x9bf5	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:21:57.656872988 CEST	192.168.2.9	1.1.1.1	0x1580	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.657080889 CEST	192.168.2.9	1.1.1.1	0x54b6	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 21, 2024 11:21:57.756066084 CEST	192.168.2.9	1.1.1.1	0x44d2	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.756443024 CEST	192.168.2.9	1.1.1.1	0xd3af	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
May 21, 2024 11:21:58.091830015 CEST	192.168.2.9	1.1.1.1	0xf300	Standard query (0)	router.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.092118025 CEST	192.168.2.9	1.1.1.1	0xfca7	Standard query (0)	router.infolinks.com	65	IN (0x0001)	false
May 21, 2024 11:21:58.213110924 CEST	192.168.2.9	1.1.1.1	0x4959	Standard query (0)	router.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.213164091 CEST	192.168.2.9	1.1.1.1	0x4e45	Standard query (0)	router.infolinks.com	65	IN (0x0001)	false
May 21, 2024 11:21:58.862791061 CEST	192.168.2.9	1.1.1.1	0x14b2	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.863995075 CEST	192.168.2.9	1.1.1.1	0x1cb5	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
May 21, 2024 11:21:59.355531931 CEST	192.168.2.9	1.1.1.1	0xbb17	Standard query (0)	rt3007.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:59.356321096 CEST	192.168.2.9	1.1.1.1	0xee0d	Standard query (0)	rt3007.infolinks.com	65	IN (0x0001)	false
May 21, 2024 11:22:00.578881979 CEST	192.168.2.9	1.1.1.1	0x18be	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.579082966 CEST	192.168.2.9	1.1.1.1	0xa59	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
May 21, 2024 11:22:00.609762907 CEST	192.168.2.9	1.1.1.1	0xc937	Standard query (0)	33across-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.610114098 CEST	192.168.2.9	1.1.1.1	0x1b3	Standard query (0)	33across-match.dotomi.com	65	IN (0x0001)	false
May 21, 2024 11:22:00.696742058 CEST	192.168.2.9	1.1.1.1	0x25fe	Standard query (0)	resources.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.697144032 CEST	192.168.2.9	1.1.1.1	0xc601	Standard query (0)	resources.infolinks.com	65	IN (0x0001)	false
May 21, 2024 11:22:00.768115997 CEST	192.168.2.9	1.1.1.1	0x6a57	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.768307924 CEST	192.168.2.9	1.1.1.1	0x5972	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 21, 2024 11:22:00.900094986 CEST	192.168.2.9	1.1.1.1	0xef0b	Standard query (0)	pxl.iqm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.900793076 CEST	192.168.2.9	1.1.1.1	0x2975	Standard query (0)	pxl.iqm.com	65	IN (0x0001)	false
May 21, 2024 11:22:01.084011078 CEST	192.168.2.9	1.1.1.1	0xc3ef	Standard query (0)	resources.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.096668959 CEST	192.168.2.9	1.1.1.1	0xd4ce	Standard query (0)	rt3007.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.122961044 CEST	192.168.2.9	1.1.1.1	0x3cb	Standard query (0)	rt3007.infolinks.com	65	IN (0x0001)	false
May 21, 2024 11:22:01.225792885 CEST	192.168.2.9	1.1.1.1	0xc273	Standard query (0)	d-code.liadm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.226030111 CEST	192.168.2.9	1.1.1.1	0x36ac	Standard query (0)	d-code.liadm.com	65	IN (0x0001)	false
May 21, 2024 11:22:01.281681061 CEST	192.168.2.9	1.1.1.1	0xf690	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.282355070 CEST	192.168.2.9	1.1.1.1	0x3698	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 21, 2024 11:22:01.360268116 CEST	192.168.2.9	1.1.1.1	0x5911	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.363632917 CEST	192.168.2.9	1.1.1.1	0x675d	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
May 21, 2024 11:22:02.505923986 CEST	192.168.2.9	1.1.1.1	0x58d0	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.506079912 CEST	192.168.2.9	1.1.1.1	0xcd3f	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
May 21, 2024 11:22:02.867530107 CEST	192.168.2.9	1.1.1.1	0x5661	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.867925882 CEST	192.168.2.9	1.1.1.1	0x7f6	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
May 21, 2024 11:22:03.261534929 CEST	192.168.2.9	1.1.1.1	0x59ea	Standard query (0)	pixel.advertising.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:03.262448072 CEST	192.168.2.9	1.1.1.1	0xf88c	Standard query (0)	pixel.advertising.com	65	IN (0x0001)	false
May 21, 2024 11:22:03.864708900 CEST	192.168.2.9	1.1.1.1	0x9478	Standard query (0)	context.monu.delivery	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:03.865773916 CEST	192.168.2.9	1.1.1.1	0x342a	Standard query (0)	context.monu.delivery	65	IN (0x0001)	false
May 21, 2024 11:22:04.876274109 CEST	192.168.2.9	1.1.1.1	0x4418	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.876435995 CEST	192.168.2.9	1.1.1.1	0xaa80	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.186731100 CEST	192.168.2.9	1.1.1.1	0xbfd9	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.186877966 CEST	192.168.2.9	1.1.1.1	0xb852	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.215097904 CEST	192.168.2.9	1.1.1.1	0x2d75	Standard query (0)	cms-xch-chicago.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.215409994 CEST	192.168.2.9	1.1.1.1	0x39be	Standard query (0)	cms-xch-chicago.33across.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.229409933 CEST	192.168.2.9	1.1.1.1	0x6547	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.229578018 CEST	192.168.2.9	1.1.1.1	0x2c70	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
May 21, 2024 11:22:05.230424881 CEST	192.168.2.9	1.1.1.1	0x4511	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.230561972 CEST	192.168.2.9	1.1.1.1	0x4e8e	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.586558104 CEST	192.168.2.9	1.1.1.1	0xd37d	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.586678028 CEST	192.168.2.9	1.1.1.1	0x5bf1	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.594912052 CEST	192.168.2.9	1.1.1.1	0xfc47	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.595072031 CEST	192.168.2.9	1.1.1.1	0xaaa4	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.725665092 CEST	192.168.2.9	1.1.1.1	0xed1d	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.725820065 CEST	192.168.2.9	1.1.1.1	0x222	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.727524042 CEST	192.168.2.9	1.1.1.1	0x50c7	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.727716923 CEST	192.168.2.9	1.1.1.1	0xdd75	Standard query (0)	cs.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:05.734251022 CEST	192.168.2.9	1.1.1.1	0x61e9	Standard query (0)	cm-x.mgid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.734492064 CEST	192.168.2.9	1.1.1.1	0x8560	Standard query (0)	cm-x.mgid.com	65	IN (0x0001)	false
May 21, 2024 11:22:05.947408915 CEST	192.168.2.9	1.1.1.1	0x308c	Standard query (0)	cms-xch.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.947650909 CEST	192.168.2.9	1.1.1.1	0xa22	Standard query (0)	cms-xch.33across.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.009413004 CEST	192.168.2.9	1.1.1.1	0xc9ca	Standard query (0)	e.serverbid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.009699106 CEST	192.168.2.9	1.1.1.1	0xed10	Standard query (0)	e.serverbid.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.029465914 CEST	192.168.2.9	1.1.1.1	0x5fbf	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.029712915 CEST	192.168.2.9	1.1.1.1	0x587a	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.133990049 CEST	192.168.2.9	1.1.1.1	0xda91	Standard query (0)	openrtb-us-east-1.axonix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.134195089 CEST	192.168.2.9	1.1.1.1	0x342a	Standard query (0)	openrtb-us-east-1.axonix.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.134605885 CEST	192.168.2.9	1.1.1.1	0xe25b	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.134732008 CEST	192.168.2.9	1.1.1.1	0xa94f	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.151803017 CEST	192.168.2.9	1.1.1.1	0xf577	Standard query (0)	router.infolinks.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.152127028 CEST	192.168.2.9	1.1.1.1	0xdf88	Standard query (0)	router.infolinks.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.153847933 CEST	192.168.2.9	1.1.1.1	0x136d	Standard query (0)	api.intentiq.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.154195070 CEST	192.168.2.9	1.1.1.1	0xa4e8	Standard query (0)	api.intentiq.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.819665909 CEST	192.168.2.9	1.1.1.1	0x93ee	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.819833994 CEST	192.168.2.9	1.1.1.1	0x37e	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.821466923 CEST	192.168.2.9	1.1.1.1	0x9479	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.821743011 CEST	192.168.2.9	1.1.1.1	0xfaec	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.838282108 CEST	192.168.2.9	1.1.1.1	0xa959	Standard query (0)	cs.emxdgt.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.838644981 CEST	192.168.2.9	1.1.1.1	0x6f8d	Standard query (0)	cs.emxdgt.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.840918064 CEST	192.168.2.9	1.1.1.1	0x90b7	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.841064930 CEST	192.168.2.9	1.1.1.1	0x4d32	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
May 21, 2024 11:22:06.852334023 CEST	192.168.2.9	1.1.1.1	0x20d2	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.852484941 CEST	192.168.2.9	1.1.1.1	0xc06e	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
May 21, 2024 11:22:07.984292030 CEST	192.168.2.9	1.1.1.1	0xc08e	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:07.984462976 CEST	192.168.2.9	1.1.1.1	0x11cc	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:22:08.314564943 CEST	192.168.2.9	1.1.1.1	0x51d7	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.314836025 CEST	192.168.2.9	1.1.1.1	0xdc2b	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
May 21, 2024 11:22:08.351447105 CEST	192.168.2.9	1.1.1.1	0xbcd7	Standard query (0)	cms-xch-chicago.33across.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.351723909 CEST	192.168.2.9	1.1.1.1	0xa743	Standard query (0)	cms-xch-chicago.33across.com	65	IN (0x0001)	false
May 21, 2024 11:22:08.561928988 CEST	192.168.2.9	1.1.1.1	0x2c22	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.562220097 CEST	192.168.2.9	1.1.1.1	0xe736	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
May 21, 2024 11:22:08.745397091 CEST	192.168.2.9	1.1.1.1	0x23ad	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.745631933 CEST	192.168.2.9	1.1.1.1	0x9b2f	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
May 21, 2024 11:22:09.116487980 CEST	192.168.2.9	1.1.1.1	0xe57	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:12.965409040 CEST	192.168.2.9	1.1.1.1	0xc5a7	Standard query (0)	prod.tahoe-analytics.publishers.advertising.a2z.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:12.966459990 CEST	192.168.2.9	1.1.1.1	0x9b38	Standard query (0)	prod.tahoe-analytics.publishers.advertising.a2z.com	65	IN (0x0001)	false
May 21, 2024 11:22:13.610114098 CEST	192.168.2.9	1.1.1.1	0x4033	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.646296978 CEST	192.168.2.9	1.1.1.1	0xe0e7	Standard query (0)	assets.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:22:13.724144936 CEST	192.168.2.9	1.1.1.1	0x8728	Standard query (0)	synchrobox.adswizz.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.724663019 CEST	192.168.2.9	1.1.1.1	0x4f55	Standard query (0)	synchrobox.adswizz.com	65	IN (0x0001)	false
May 21, 2024 11:22:13.727847099 CEST	192.168.2.9	1.1.1.1	0x41fa	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.728029013 CEST	192.168.2.9	1.1.1.1	0xafc7	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
May 21, 2024 11:22:13.728393078 CEST	192.168.2.9	1.1.1.1	0x5c85	Standard query (0)	cs-tam.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.728683949 CEST	192.168.2.9	1.1.1.1	0xe9eb	Standard query (0)	cs-tam.minutemedia-prebid.com	65	IN (0x0001)	false
May 21, 2024 11:22:13.811393023 CEST	192.168.2.9	1.1.1.1	0xaab9	Standard query (0)	cdn.adswizz.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.811849117 CEST	192.168.2.9	1.1.1.1	0x7332	Standard query (0)	cdn.adswizz.com	65	IN (0x0001)	false
May 21, 2024 11:22:14.607995033 CEST	192.168.2.9	1.1.1.1	0x130f	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:14.608167887 CEST	192.168.2.9	1.1.1.1	0x8ffb	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 21, 2024 11:22:16.079503059 CEST	192.168.2.9	1.1.1.1	0xbca6	Standard query (0)	protected-by.clarium.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:16.080312014 CEST	192.168.2.9	1.1.1.1	0x6ba0	Standard query (0)	protected-by.clarium.io	65	IN (0x0001)	false
May 21, 2024 11:22:17.423772097 CEST	192.168.2.9	1.1.1.1	0x2e1	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:17.424140930 CEST	192.168.2.9	1.1.1.1	0xcc5f	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
May 21, 2024 11:22:17.541407108 CEST	192.168.2.9	1.1.1.1	0xf5fd	Standard query (0)	x.serverbid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:17.541740894 CEST	192.168.2.9	1.1.1.1	0x1084	Standard query (0)	x.serverbid.com	65	IN (0x0001)	false
May 21, 2024 11:22:18.754873037 CEST	192.168.2.9	1.1.1.1	0xf745	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.755053043 CEST	192.168.2.9	1.1.1.1	0x719b	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
May 21, 2024 11:22:20.159966946 CEST	192.168.2.9	1.1.1.1	0x68bf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:20.159966946 CEST	192.168.2.9	1.1.1.1	0xa2ee	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 21, 2024 11:22:20.580301046 CEST	192.168.2.9	1.1.1.1	0xb47a	Standard query (0)	trace-eu.mediago.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:20.580467939 CEST	192.168.2.9	1.1.1.1	0xfd3d	Standard query (0)	trace-eu.mediago.io	65	IN (0x0001)	false
May 21, 2024 11:22:20.701405048 CEST	192.168.2.9	1.1.1.1	0x2fab	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:20.701673985 CEST	192.168.2.9	1.1.1.1	0x86ed	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 21, 2024 11:22:21.569144964 CEST	192.168.2.9	1.1.1.1	0xab8d	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.569144964 CEST	192.168.2.9	1.1.1.1	0x8398	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
May 21, 2024 11:22:21.569888115 CEST	192.168.2.9	1.1.1.1	0xbf3c	Standard query (0)	warp.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.569888115 CEST	192.168.2.9	1.1.1.1	0xe42c	Standard query (0)	warp.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:21.588876963 CEST	192.168.2.9	1.1.1.1	0x84ca	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.590168953 CEST	192.168.2.9	1.1.1.1	0x4f79	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
May 21, 2024 11:22:21.751346111 CEST	192.168.2.9	1.1.1.1	0xd702	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.751954079 CEST	192.168.2.9	1.1.1.1	0xbf49	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:23.631803989 CEST	192.168.2.9	1.1.1.1	0x27ac	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:23.632258892 CEST	192.168.2.9	1.1.1.1	0x8361	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
May 21, 2024 11:22:23.640129089 CEST	192.168.2.9	1.1.1.1	0x8b7a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:23.640372038 CEST	192.168.2.9	1.1.1.1	0xef15	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:22:24.834625959 CEST	192.168.2.9	1.1.1.1	0x9f48	Standard query (0)	cdn.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.834955931 CEST	192.168.2.9	1.1.1.1	0x75cb	Standard query (0)	cdn.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:24.835977077 CEST	192.168.2.9	1.1.1.1	0xc0af	Standard query (0)	static.vidazoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.836121082 CEST	192.168.2.9	1.1.1.1	0xefe5	Standard query (0)	static.vidazoo.com	65	IN (0x0001)	false
May 21, 2024 11:22:24.854149103 CEST	192.168.2.9	1.1.1.1	0x7921	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.854286909 CEST	192.168.2.9	1.1.1.1	0xd7d8	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:25.232626915 CEST	192.168.2.9	1.1.1.1	0x82c0	Standard query (0)	use2-assets.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:25.232891083 CEST	192.168.2.9	1.1.1.1	0x6037	Standard query (0)	use2-assets.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:22:26.205064058 CEST	192.168.2.9	1.1.1.1	0x377f	Standard query (0)	x.serverbid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:26.205940008 CEST	192.168.2.9	1.1.1.1	0xf63c	Standard query (0)	x.serverbid.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.438858032 CEST	192.168.2.9	1.1.1.1	0x46a2	Standard query (0)	prod.tahoe-analytics.publishers.advertising.a2z.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.439263105 CEST	192.168.2.9	1.1.1.1	0x1365	Standard query (0)	prod.tahoe-analytics.publishers.advertising.a2z.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.458726883 CEST	192.168.2.9	1.1.1.1	0xcbd0	Standard query (0)	protected-by.clarium.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.458726883 CEST	192.168.2.9	1.1.1.1	0xd4bc	Standard query (0)	protected-by.clarium.io	65	IN (0x0001)	false
May 21, 2024 11:22:29.459767103 CEST	192.168.2.9	1.1.1.1	0x4d8b	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.460865021 CEST	192.168.2.9	1.1.1.1	0xca3d	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.460865021 CEST	192.168.2.9	1.1.1.1	0x58f4	Standard query (0)	sync.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.461421967 CEST	192.168.2.9	1.1.1.1	0xb0e7	Standard query (0)	sync.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.473393917 CEST	192.168.2.9	1.1.1.1	0x133	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.473908901 CEST	192.168.2.9	1.1.1.1	0xc92b	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.475954056 CEST	192.168.2.9	1.1.1.1	0x70c5	Standard query (0)	lg3.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.476361036 CEST	192.168.2.9	1.1.1.1	0x2675	Standard query (0)	lg3.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:29.476890087 CEST	192.168.2.9	1.1.1.1	0x439f	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.477068901 CEST	192.168.2.9	1.1.1.1	0x54b4	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:29.484186888 CEST	192.168.2.9	1.1.1.1	0xbd4f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.484186888 CEST	192.168.2.9	1.1.1.1	0xa78	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:22:29.486649036 CEST	192.168.2.9	1.1.1.1	0xc33b	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.486649036 CEST	192.168.2.9	1.1.1.1	0xea7f	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.492592096 CEST	192.168.2.9	1.1.1.1	0x6872	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.493033886 CEST	192.168.2.9	1.1.1.1	0x2efc	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.495608091 CEST	192.168.2.9	1.1.1.1	0x2dd9	Standard query (0)	yummy.consumable.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.495763063 CEST	192.168.2.9	1.1.1.1	0xed83	Standard query (0)	yummy.consumable.com	65	IN (0x0001)	false
May 21, 2024 11:22:29.510843992 CEST	192.168.2.9	1.1.1.1	0x40c6	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.511157990 CEST	192.168.2.9	1.1.1.1	0xfd43	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
May 21, 2024 11:22:29.665994883 CEST	192.168.2.9	1.1.1.1	0x28a	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.666337967 CEST	192.168.2.9	1.1.1.1	0x4943	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.747112989 CEST	192.168.2.9	1.1.1.1	0x8ada	Standard query (0)	prebid.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.748848915 CEST	192.168.2.9	1.1.1.1	0x2f95	Standard query (0)	prebid.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.763701916 CEST	192.168.2.9	1.1.1.1	0x8fb2	Standard query (0)	bisrtb.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.764663935 CEST	192.168.2.9	1.1.1.1	0xe2c2	Standard query (0)	bisrtb.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.793189049 CEST	192.168.2.9	1.1.1.1	0xb391	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.793936968 CEST	192.168.2.9	1.1.1.1	0x5204	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.794902086 CEST	192.168.2.9	1.1.1.1	0x698e	Standard query (0)	pl.vidazoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.795241117 CEST	192.168.2.9	1.1.1.1	0x60c6	Standard query (0)	pl.vidazoo.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.796122074 CEST	192.168.2.9	1.1.1.1	0x244f	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.796468973 CEST	192.168.2.9	1.1.1.1	0x2d49	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.834353924 CEST	192.168.2.9	1.1.1.1	0x3c2d	Standard query (0)	lbs-event.gcp.lineate-33x.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.834702969 CEST	192.168.2.9	1.1.1.1	0x9fd7	Standard query (0)	lbs-event.gcp.lineate-33x.net	65	IN (0x0001)	false
May 21, 2024 11:22:31.843291044 CEST	192.168.2.9	1.1.1.1	0x83b1	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.843656063 CEST	192.168.2.9	1.1.1.1	0x4f2e	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.853899002 CEST	192.168.2.9	1.1.1.1	0x445b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.854161978 CEST	192.168.2.9	1.1.1.1	0xb7fb	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 21, 2024 11:22:31.895005941 CEST	192.168.2.9	1.1.1.1	0x90eb	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.896178961 CEST	192.168.2.9	1.1.1.1	0xcfa	Standard query (0)	hb-api.omnitagjs.com	65	IN (0x0001)	false
May 21, 2024 11:22:32.383245945 CEST	192.168.2.9	1.1.1.1	0xeffe	Standard query (0)	www.idrive.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.383415937 CEST	192.168.2.9	1.1.1.1	0xdd82	Standard query (0)	www.idrive.com	65	IN (0x0001)	false
May 21, 2024 11:22:32.442823887 CEST	192.168.2.9	1.1.1.1	0x6b68	Standard query (0)	static.vidazoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.443073988 CEST	192.168.2.9	1.1.1.1	0x4b5f	Standard query (0)	static.vidazoo.com	65	IN (0x0001)	false
May 21, 2024 11:22:32.808954000 CEST	192.168.2.9	1.1.1.1	0x4d21	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.809123039 CEST	192.168.2.9	1.1.1.1	0x1071	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
May 21, 2024 11:22:32.898273945 CEST	192.168.2.9	1.1.1.1	0xfa9f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.898531914 CEST	192.168.2.9	1.1.1.1	0x8af7	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:33.662087917 CEST	192.168.2.9	1.1.1.1	0xb2f6	Standard query (0)	bis2.vidazoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:33.662250996 CEST	192.168.2.9	1.1.1.1	0x5725	Standard query (0)	bis2.vidazoo.com	65	IN (0x0001)	false
May 21, 2024 11:22:34.260411978 CEST	192.168.2.9	1.1.1.1	0x1dd0	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.260565042 CEST	192.168.2.9	1.1.1.1	0xd425	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:34.685650110 CEST	192.168.2.9	1.1.1.1	0xa20e	Standard query (0)	track.kueezssp.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.685832977 CEST	192.168.2.9	1.1.1.1	0xf012	Standard query (0)	track.kueezssp.com	65	IN (0x0001)	false
May 21, 2024 11:22:34.686445951 CEST	192.168.2.9	1.1.1.1	0x5161	Standard query (0)	gtrack.kueezssp.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.686611891 CEST	192.168.2.9	1.1.1.1	0xe440	Standard query (0)	gtrack.kueezssp.com	65	IN (0x0001)	false
May 21, 2024 11:22:34.687669992 CEST	192.168.2.9	1.1.1.1	0x63d8	Standard query (0)	bisrtb.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.687669992 CEST	192.168.2.9	1.1.1.1	0x39bf	Standard query (0)	bisrtb.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:22:34.721431017 CEST	192.168.2.9	1.1.1.1	0x3ed6	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
May 21, 2024 11:22:34.721431017 CEST	192.168.2.9	1.1.1.1	0xef0e	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.264092922 CEST	192.168.2.9	1.1.1.1	0x4141	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.264317989 CEST	192.168.2.9	1.1.1.1	0x2a60	Standard query (0)	ssum.casalemedia.com	65	IN (0x0001)	false
May 21, 2024 11:22:35.472985983 CEST	192.168.2.9	1.1.1.1	0x74aa	Standard query (0)	ox-rtb-us-east4.openx.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.472985983 CEST	192.168.2.9	1.1.1.1	0x5ada	Standard query (0)	ox-rtb-us-east4.openx.net	65	IN (0x0001)	false
May 21, 2024 11:22:35.535293102 CEST	192.168.2.9	1.1.1.1	0x2d12	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.535293102 CEST	192.168.2.9	1.1.1.1	0x4f48	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
May 21, 2024 11:22:35.548116922 CEST	192.168.2.9	1.1.1.1	0x165a	Standard query (0)	verify.amxrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.549177885 CEST	192.168.2.9	1.1.1.1	0x4fff	Standard query (0)	verify.amxrtb.com	65	IN (0x0001)	false
May 21, 2024 11:22:35.663237095 CEST	192.168.2.9	1.1.1.1	0x9a70	Standard query (0)	lax1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.663647890 CEST	192.168.2.9	1.1.1.1	0xb044	Standard query (0)	lax1-ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:35.664186954 CEST	192.168.2.9	1.1.1.1	0x3bef	Standard query (0)	warp.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.664326906 CEST	192.168.2.9	1.1.1.1	0x642f	Standard query (0)	warp.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:35.816406012 CEST	192.168.2.9	1.1.1.1	0xed60	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.816554070 CEST	192.168.2.9	1.1.1.1	0x95e8	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:35.904090881 CEST	192.168.2.9	1.1.1.1	0x59cb	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.904238939 CEST	192.168.2.9	1.1.1.1	0x491e	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.013658047 CEST	192.168.2.9	1.1.1.1	0xdf20	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.013830900 CEST	192.168.2.9	1.1.1.1	0x9e3e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.015512943 CEST	192.168.2.9	1.1.1.1	0xb75d	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.016000986 CEST	192.168.2.9	1.1.1.1	0x4a0d	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.093264103 CEST	192.168.2.9	1.1.1.1	0x3255	Standard query (0)	ssl.connextra.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.093425989 CEST	192.168.2.9	1.1.1.1	0x8d0b	Standard query (0)	ssl.connextra.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.110557079 CEST	192.168.2.9	1.1.1.1	0x84bf	Standard query (0)	ams3-ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.141236067 CEST	192.168.2.9	1.1.1.1	0xad8a	Standard query (0)	ams3-ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.180382967 CEST	192.168.2.9	1.1.1.1	0x9561	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.180687904 CEST	192.168.2.9	1.1.1.1	0x8f75	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.391372919 CEST	192.168.2.9	1.1.1.1	0xa056	Standard query (0)	i0.wp.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.391634941 CEST	192.168.2.9	1.1.1.1	0x8458	Standard query (0)	i0.wp.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.740380049 CEST	192.168.2.9	1.1.1.1	0x324f	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.740380049 CEST	192.168.2.9	1.1.1.1	0x2bf3	Standard query (0)	sync.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:22:36.741466045 CEST	192.168.2.9	1.1.1.1	0x1805	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.741925001 CEST	192.168.2.9	1.1.1.1	0xfe5c	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.746879101 CEST	192.168.2.9	1.1.1.1	0xc0bb	Standard query (0)	sync.cootlogix.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.746879101 CEST	192.168.2.9	1.1.1.1	0xaa1	Standard query (0)	sync.cootlogix.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.747533083 CEST	192.168.2.9	1.1.1.1	0xf629	Standard query (0)	sync.kueezrtb.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.748204947 CEST	192.168.2.9	1.1.1.1	0x637f	Standard query (0)	sync.kueezrtb.com	65	IN (0x0001)	false
May 21, 2024 11:22:36.748485088 CEST	192.168.2.9	1.1.1.1	0x6529	Standard query (0)	sync.serverbid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.748485088 CEST	192.168.2.9	1.1.1.1	0x8e86	Standard query (0)	sync.serverbid.com	65	IN (0x0001)	false
May 21, 2024 11:22:37.128475904 CEST	192.168.2.9	1.1.1.1	0x4436	Standard query (0)	149837791.v2.pressablecdn.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.128694057 CEST	192.168.2.9	1.1.1.1	0x1d31	Standard query (0)	149837791.v2.pressablecdn.com	65	IN (0x0001)	false
May 21, 2024 11:22:37.317543983 CEST	192.168.2.9	1.1.1.1	0xa779	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.317543983 CEST	192.168.2.9	1.1.1.1	0x8fbe	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:22:37.321532965 CEST	192.168.2.9	1.1.1.1	0xd4cb	Standard query (0)	s2s.t13.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.321841955 CEST	192.168.2.9	1.1.1.1	0xccc4	Standard query (0)	s2s.t13.io	65	IN (0x0001)	false
May 21, 2024 11:22:37.377860069 CEST	192.168.2.9	1.1.1.1	0x2838	Standard query (0)	lg3.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.378031969 CEST	192.168.2.9	1.1.1.1	0x65a9	Standard query (0)	lg3.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:37.436217070 CEST	192.168.2.9	1.1.1.1	0xbdad	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.436217070 CEST	192.168.2.9	1.1.1.1	0xfaa5	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:22:37.511956930 CEST	192.168.2.9	1.1.1.1	0xf66a	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.512360096 CEST	192.168.2.9	1.1.1.1	0x8590	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
May 21, 2024 11:22:37.895761013 CEST	192.168.2.9	1.1.1.1	0x2046	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.896115065 CEST	192.168.2.9	1.1.1.1	0x6cdb	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
May 21, 2024 11:22:37.897751093 CEST	192.168.2.9	1.1.1.1	0x56a4	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.898150921 CEST	192.168.2.9	1.1.1.1	0xc628	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:38.145896912 CEST	192.168.2.9	1.1.1.1	0x6c33	Standard query (0)	cdn.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.146033049 CEST	192.168.2.9	1.1.1.1	0x930f	Standard query (0)	cdn.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:38.549904108 CEST	192.168.2.9	1.1.1.1	0xedf9	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.550403118 CEST	192.168.2.9	1.1.1.1	0xbde	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
May 21, 2024 11:22:38.638169050 CEST	192.168.2.9	1.1.1.1	0x15e8	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.638375044 CEST	192.168.2.9	1.1.1.1	0x78ef	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
May 21, 2024 11:22:38.870019913 CEST	192.168.2.9	1.1.1.1	0x56d5	Standard query (0)	dsp.nrich.ai	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.870243073 CEST	192.168.2.9	1.1.1.1	0x52b4	Standard query (0)	dsp.nrich.ai	65	IN (0x0001)	false
May 21, 2024 11:22:39.060113907 CEST	192.168.2.9	1.1.1.1	0x60e5	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.060846090 CEST	192.168.2.9	1.1.1.1	0xfe07	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
May 21, 2024 11:22:39.431698084 CEST	192.168.2.9	1.1.1.1	0x5f4b	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.431837082 CEST	192.168.2.9	1.1.1.1	0x4de8	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
May 21, 2024 11:22:39.561705112 CEST	192.168.2.9	1.1.1.1	0xa009	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.561846018 CEST	192.168.2.9	1.1.1.1	0x81f2	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
May 21, 2024 11:22:39.747375965 CEST	192.168.2.9	1.1.1.1	0x7232	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.766588926 CEST	192.168.2.9	1.1.1.1	0x9b7e	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2024 11:22:40.043349028 CEST	192.168.2.9	1.1.1.1	0xea1b	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.043447018 CEST	192.168.2.9	1.1.1.1	0x8c40	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
May 21, 2024 11:22:40.260612011 CEST	192.168.2.9	1.1.1.1	0x2250	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.266923904 CEST	192.168.2.9	1.1.1.1	0x5266	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 21, 2024 11:22:40.292541027 CEST	192.168.2.9	1.1.1.1	0xb5cb	Standard query (0)	rtb.primis.tech	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.292664051 CEST	192.168.2.9	1.1.1.1	0x1c43	Standard query (0)	rtb.primis.tech	65	IN (0x0001)	false
May 21, 2024 11:22:40.297060013 CEST	192.168.2.9	1.1.1.1	0xc965	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.297322035 CEST	192.168.2.9	1.1.1.1	0xa210	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
May 21, 2024 11:22:40.344815969 CEST	192.168.2.9	1.1.1.1	0x8bd4	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.363975048 CEST	192.168.2.9	1.1.1.1	0x8a79	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:22:40.716432095 CEST	192.168.2.9	1.1.1.1	0x229	Standard query (0)	hb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.716726065 CEST	192.168.2.9	1.1.1.1	0xd2d	Standard query (0)	hb.minutemedia-prebid.com	65	IN (0x0001)	false
May 21, 2024 11:22:40.725825071 CEST	192.168.2.9	1.1.1.1	0x506f	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.725936890 CEST	192.168.2.9	1.1.1.1	0x50ca	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.017422915 CEST	192.168.2.9	1.1.1.1	0xe012	Standard query (0)	hb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.017782927 CEST	192.168.2.9	1.1.1.1	0xf5a2	Standard query (0)	hb.minutemedia-prebid.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.019886971 CEST	192.168.2.9	1.1.1.1	0xbdb	Standard query (0)	context.monu.delivery	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.020011902 CEST	192.168.2.9	1.1.1.1	0x85ce	Standard query (0)	context.monu.delivery	65	IN (0x0001)	false
May 21, 2024 11:22:41.030386925 CEST	192.168.2.9	1.1.1.1	0xa07e	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.030545950 CEST	192.168.2.9	1.1.1.1	0xadeb	Standard query (0)	hb-api.omnitagjs.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.043190956 CEST	192.168.2.9	1.1.1.1	0xa298	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.043313026 CEST	192.168.2.9	1.1.1.1	0x5569	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.742172003 CEST	192.168.2.9	1.1.1.1	0xa00	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.742286921 CEST	192.168.2.9	1.1.1.1	0xadd6	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.863888025 CEST	192.168.2.9	1.1.1.1	0x7a7a	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.864093065 CEST	192.168.2.9	1.1.1.1	0x83fc	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 21, 2024 11:22:41.901523113 CEST	192.168.2.9	1.1.1.1	0xee9a	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.901621103 CEST	192.168.2.9	1.1.1.1	0x6058	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.902388096 CEST	192.168.2.9	1.1.1.1	0x3aa5	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.902496099 CEST	192.168.2.9	1.1.1.1	0x6a80	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 21, 2024 11:22:41.908622026 CEST	192.168.2.9	1.1.1.1	0xfc42	Standard query (0)	ow.pubmatic.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.908726931 CEST	192.168.2.9	1.1.1.1	0xf5f0	Standard query (0)	ow.pubmatic.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.971610069 CEST	192.168.2.9	1.1.1.1	0x3141	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.971781015 CEST	192.168.2.9	1.1.1.1	0xe6ba	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.972490072 CEST	192.168.2.9	1.1.1.1	0x883a	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.972606897 CEST	192.168.2.9	1.1.1.1	0x1265	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:22:41.988847971 CEST	192.168.2.9	1.1.1.1	0xc341	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.988949060 CEST	192.168.2.9	1.1.1.1	0x68cc	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
May 21, 2024 11:22:42.009008884 CEST	192.168.2.9	1.1.1.1	0x751b	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.009109974 CEST	192.168.2.9	1.1.1.1	0x2c6b	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
May 21, 2024 11:22:42.019906998 CEST	192.168.2.9	1.1.1.1	0xaf75	Standard query (0)	1x1.a-mo.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.020086050 CEST	192.168.2.9	1.1.1.1	0x190f	Standard query (0)	1x1.a-mo.net	65	IN (0x0001)	false
May 21, 2024 11:22:42.079988956 CEST	192.168.2.9	1.1.1.1	0xd51	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.080115080 CEST	192.168.2.9	1.1.1.1	0x773	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 21, 2024 11:22:42.123516083 CEST	192.168.2.9	1.1.1.1	0x552d	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.123626947 CEST	192.168.2.9	1.1.1.1	0xc738	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 21, 2024 11:22:42.126266003 CEST	192.168.2.9	1.1.1.1	0xa361	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.126399994 CEST	192.168.2.9	1.1.1.1	0x4791	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
May 21, 2024 11:22:42.253705025 CEST	192.168.2.9	1.1.1.1	0x7989	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.253971100 CEST	192.168.2.9	1.1.1.1	0x79a2	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 21, 2024 11:22:42.344579935 CEST	192.168.2.9	1.1.1.1	0xf7e6	Standard query (0)	mb9eo.publishers.tremorhub.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.344687939 CEST	192.168.2.9	1.1.1.1	0x26c6	Standard query (0)	mb9eo.publishers.tremorhub.com	65	IN (0x0001)	false
May 21, 2024 11:22:42.403925896 CEST	192.168.2.9	1.1.1.1	0x9496	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.404145002 CEST	192.168.2.9	1.1.1.1	0x2360	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
May 21, 2024 11:22:43.639297009 CEST	192.168.2.9	1.1.1.1	0xb97	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.639391899 CEST	192.168.2.9	1.1.1.1	0xb2ca	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
May 21, 2024 11:22:43.667536974 CEST	192.168.2.9	1.1.1.1	0xd535	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.667659044 CEST	192.168.2.9	1.1.1.1	0xb31f	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
May 21, 2024 11:22:43.667855024 CEST	192.168.2.9	1.1.1.1	0x138c	Standard query (0)	id.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.667948008 CEST	192.168.2.9	1.1.1.1	0x4c2f	Standard query (0)	id.crwdcntrl.net	65	IN (0x0001)	false
May 21, 2024 11:22:43.668704033 CEST	192.168.2.9	1.1.1.1	0x4f44	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.668800116 CEST	192.168.2.9	1.1.1.1	0x24f4	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
May 21, 2024 11:22:43.879225016 CEST	192.168.2.9	1.1.1.1	0xe113	Standard query (0)	rubicon-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.879368067 CEST	192.168.2.9	1.1.1.1	0x7ce7	Standard query (0)	rubicon-match.dotomi.com	65	IN (0x0001)	false
May 21, 2024 11:22:44.627721071 CEST	192.168.2.9	1.1.1.1	0x9857	Standard query (0)	prebid-s2s.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:44.627721071 CEST	192.168.2.9	1.1.1.1	0xd2a6	Standard query (0)	prebid-s2s.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.916433096 CEST	192.168.2.9	1.1.1.1	0xc85d	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.916646957 CEST	192.168.2.9	1.1.1.1	0x993e	Standard query (0)	cs.media.net	65	IN (0x0001)	false
May 21, 2024 11:22:44.963778019 CEST	192.168.2.9	1.1.1.1	0xa8c0	Standard query (0)	usr.undertone.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.963927031 CEST	192.168.2.9	1.1.1.1	0xa09a	Standard query (0)	usr.undertone.com	65	IN (0x0001)	false
May 21, 2024 11:22:45.007529974 CEST	192.168.2.9	1.1.1.1	0xa44e	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.007958889 CEST	192.168.2.9	1.1.1.1	0xd37e	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
May 21, 2024 11:22:45.041495085 CEST	192.168.2.9	1.1.1.1	0xa03c	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.042381048 CEST	192.168.2.9	1.1.1.1	0x6c3d	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
May 21, 2024 11:22:45.370002985 CEST	192.168.2.9	1.1.1.1	0x3391	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.371247053 CEST	192.168.2.9	1.1.1.1	0x78d	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
May 21, 2024 11:22:45.422445059 CEST	192.168.2.9	1.1.1.1	0x947e	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.422816038 CEST	192.168.2.9	1.1.1.1	0x293d	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 21, 2024 11:21:01.081826925 CEST	1.1.1.1	192.168.2.9	0xe15a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:01.081826925 CEST	1.1.1.1	192.168.2.9	0xe15a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:10.836658001 CEST	1.1.1.1	192.168.2.9	0x64b4	No error (0)	jaz.wxk.mybluehost.me		162.241.225.132	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:11.779294968 CEST	1.1.1.1	192.168.2.9	0x9cc6	No error (0)	www.swisspass.ch		193.203.121.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:12.259660959 CEST	1.1.1.1	192.168.2.9	0xf190	No error (0)	cdn.app.sbb.ch		52.57.73.234	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:12.259660959 CEST	1.1.1.1	192.168.2.9	0xf190	No error (0)	cdn.app.sbb.ch		18.185.150.181	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:12.259660959 CEST	1.1.1.1	192.168.2.9	0xf190	No error (0)	cdn.app.sbb.ch		3.78.101.79	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:13.132877111 CEST	1.1.1.1	192.168.2.9	0x3ec6	No error (0)	www.swisspass.ch		193.203.121.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:13.692130089 CEST	1.1.1.1	192.168.2.9	0x39a	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:13.692145109 CEST	1.1.1.1	192.168.2.9	0x6a2d	No error (0)	www.google.com			65	IN (0x0001)	false
May 21, 2024 11:21:14.396719933 CEST	1.1.1.1	192.168.2.9	0x3c5	No error (0)	jaz.wxk.mybluehost.me		162.241.225.132	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:23.669815063 CEST	1.1.1.1	192.168.2.9	0x8e34	No error (0)	corporatedefenseetl.com			65	IN (0x0001)	false
May 21, 2024 11:21:23.688663960 CEST	1.1.1.1	192.168.2.9	0x8e24	No error (0)	corporatedefenseetl.com		104.21.70.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:23.688663960 CEST	1.1.1.1	192.168.2.9	0x8e24	No error (0)	corporatedefenseetl.com		172.67.217.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:24.091193914 CEST	1.1.1.1	192.168.2.9	0xd4a4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:24.091193914 CEST	1.1.1.1	192.168.2.9	0xd4a4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:25.655333042 CEST	1.1.1.1	192.168.2.9	0x4673	No error (0)	custommapposter.com			65	IN (0x0001)	false
May 21, 2024 11:21:25.655349016 CEST	1.1.1.1	192.168.2.9	0x22b5	No error (0)	custommapposter.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:25.655349016 CEST	1.1.1.1	192.168.2.9	0x22b5	No error (0)	custommapposter.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:26.455920935 CEST	1.1.1.1	192.168.2.9	0x9786	No error (0)	monu.delivery		185.3.92.76	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:28.830555916 CEST	1.1.1.1	192.168.2.9	0xa15	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:28.833937883 CEST	1.1.1.1	192.168.2.9	0xdbbf	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:29.466303110 CEST	1.1.1.1	192.168.2.9	0xc36a	No error (0)	custommapposter.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:29.466303110 CEST	1.1.1.1	192.168.2.9	0xc36a	No error (0)	custommapposter.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:29.466315031 CEST	1.1.1.1	192.168.2.9	0xf715	No error (0)	custommapposter.com			65	IN (0x0001)	false
May 21, 2024 11:21:29.771660089 CEST	1.1.1.1	192.168.2.9	0xddab	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:29.775518894 CEST	1.1.1.1	192.168.2.9	0xaaff	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:29.850886106 CEST	1.1.1.1	192.168.2.9	0x4b2a	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 21, 2024 11:21:29.850902081 CEST	1.1.1.1	192.168.2.9	0xb101	No error (0)	googleads.g.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:29.885241032 CEST	1.1.1.1	192.168.2.9	0x911d	No error (0)	monu.delivery		185.3.92.76	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.754864931 CEST	1.1.1.1	192.168.2.9	0xd82d	No error (0)	securepubads.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.759634972 CEST	1.1.1.1	192.168.2.9	0xf8f2	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 21, 2024 11:21:30.759654045 CEST	1.1.1.1	192.168.2.9	0x166e	No error (0)	cdn.confiant-integrations.net		172.64.144.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.759654045 CEST	1.1.1.1	192.168.2.9	0x166e	No error (0)	cdn.confiant-integrations.net		104.18.43.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.759665966 CEST	1.1.1.1	192.168.2.9	0x9858	No error (0)	cdn.confiant-integrations.net			65	IN (0x0001)	false
May 21, 2024 11:21:30.759676933 CEST	1.1.1.1	192.168.2.9	0xbb8e	No error (0)	static.kueezrtb.com			65	IN (0x0001)	false
May 21, 2024 11:21:30.764714956 CEST	1.1.1.1	192.168.2.9	0x8bce	No error (0)	static.kueezrtb.com		172.67.21.232	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764714956 CEST	1.1.1.1	192.168.2.9	0x8bce	No error (0)	static.kueezrtb.com		104.22.34.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764714956 CEST	1.1.1.1	192.168.2.9	0x8bce	No error (0)	static.kueezrtb.com		104.22.35.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764739037 CEST	1.1.1.1	192.168.2.9	0xee5e	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.764744997 CEST	1.1.1.1	192.168.2.9	0x1edd	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.764755964 CEST	1.1.1.1	192.168.2.9	0x8010	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.769449949 CEST	1.1.1.1	192.168.2.9	0x4852	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.769449949 CEST	1.1.1.1	192.168.2.9	0x4852	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.769449949 CEST	1.1.1.1	192.168.2.9	0x4852	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.769449949 CEST	1.1.1.1	192.168.2.9	0x4852	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.784197092 CEST	1.1.1.1	192.168.2.9	0x58b	No error (0)	api.id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		99.80.73.249	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		108.129.15.138	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		54.77.79.252	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		52.215.214.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		54.77.248.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.971440077 CEST	1.1.1.1	192.168.2.9	0xf46e	No error (0)	g2.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980365992 CEST	1.1.1.1	192.168.2.9	0x15a9	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980380058 CEST	1.1.1.1	192.168.2.9	0x84be	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980401039 CEST	1.1.1.1	192.168.2.9	0xe9ae	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980401039 CEST	1.1.1.1	192.168.2.9	0xe9ae	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980412960 CEST	1.1.1.1	192.168.2.9	0xb749	No error (0)	exchange.kueezrtb.com	exchangekueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980412960 CEST	1.1.1.1	192.168.2.9	0xb749	No error (0)	exchangekueez.cootlogix.com	vidazoo-p-vidazoo-openrtb-prebid-kueez-us-nyc1-k8s.vidazoo.services		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980412960 CEST	1.1.1.1	192.168.2.9	0xb749	No error (0)	vidazoo-p-vidazoo-openrtb-prebid-kueez-us-nyc1-k8s.vidazoo.services	istio-k8s-vidazoo-p-us-nyc1-external.vidazoo.services		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980431080 CEST	1.1.1.1	192.168.2.9	0x6b80	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.980443954 CEST	1.1.1.1	192.168.2.9	0xd6b6	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980443954 CEST	1.1.1.1	192.168.2.9	0xd6b6	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980453968 CEST	1.1.1.1	192.168.2.9	0xce03	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980453968 CEST	1.1.1.1	192.168.2.9	0xce03	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.980453968 CEST	1.1.1.1	192.168.2.9	0xce03	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984622955 CEST	1.1.1.1	192.168.2.9	0x216f	No error (0)	exchange.kueezrtb.com	exchangekueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984622955 CEST	1.1.1.1	192.168.2.9	0x216f	No error (0)	exchangekueez.cootlogix.com	asw8zbfaxs.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984622955 CEST	1.1.1.1	192.168.2.9	0x216f	No error (0)	asw8zbfaxs.puzztake.com	hjzl8sqlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984622955 CEST	1.1.1.1	192.168.2.9	0x216f	No error (0)	hjzl8sqlb.puzztake.com		104.207.133.222	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984622955 CEST	1.1.1.1	192.168.2.9	0x216f	No error (0)	hjzl8sqlb.puzztake.com		149.28.57.102	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984647989 CEST	1.1.1.1	192.168.2.9	0xd455	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984647989 CEST	1.1.1.1	192.168.2.9	0xd455	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984647989 CEST	1.1.1.1	192.168.2.9	0xd455	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984647989 CEST	1.1.1.1	192.168.2.9	0xd455	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984658957 CEST	1.1.1.1	192.168.2.9	0xdd30	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984658957 CEST	1.1.1.1	192.168.2.9	0xdd30	No error (0)	hb.digbearings.com		54.171.119.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984658957 CEST	1.1.1.1	192.168.2.9	0xdd30	No error (0)	hb.digbearings.com		34.251.30.134	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984658957 CEST	1.1.1.1	192.168.2.9	0xdd30	No error (0)	hb.digbearings.com		54.195.141.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984658957 CEST	1.1.1.1	192.168.2.9	0xdd30	No error (0)	hb.digbearings.com		52.31.183.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984658957 CEST	1.1.1.1	192.168.2.9	0xdd30	No error (0)	hb.digbearings.com		52.210.1.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984658957 CEST	1.1.1.1	192.168.2.9	0xdd30	No error (0)	hb.digbearings.com		52.209.216.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:30.984669924 CEST	1.1.1.1	192.168.2.9	0x13df	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984680891 CEST	1.1.1.1	192.168.2.9	0x9209	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984700918 CEST	1.1.1.1	192.168.2.9	0xfe52	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:30.984711885 CEST	1.1.1.1	192.168.2.9	0x5b08	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024806976 CEST	1.1.1.1	192.168.2.9	0xf5ee	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024821997 CEST	1.1.1.1	192.168.2.9	0x6000	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024821997 CEST	1.1.1.1	192.168.2.9	0x6000	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024821997 CEST	1.1.1.1	192.168.2.9	0x6000	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024821997 CEST	1.1.1.1	192.168.2.9	0x6000	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024832964 CEST	1.1.1.1	192.168.2.9	0x8ce8	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024832964 CEST	1.1.1.1	192.168.2.9	0x8ce8	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024832964 CEST	1.1.1.1	192.168.2.9	0x8ce8	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024844885 CEST	1.1.1.1	192.168.2.9	0x4a0b	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024844885 CEST	1.1.1.1	192.168.2.9	0x4a0b	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024844885 CEST	1.1.1.1	192.168.2.9	0x4a0b	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024844885 CEST	1.1.1.1	192.168.2.9	0x4a0b	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024844885 CEST	1.1.1.1	192.168.2.9	0x4a0b	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024869919 CEST	1.1.1.1	192.168.2.9	0xe70a	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024869919 CEST	1.1.1.1	192.168.2.9	0xe70a	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.151	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024869919 CEST	1.1.1.1	192.168.2.9	0xe70a	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024880886 CEST	1.1.1.1	192.168.2.9	0x778d	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024890900 CEST	1.1.1.1	192.168.2.9	0x5b12	No error (0)	prebid.cootlogix.com	a0csk8ze4b.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024890900 CEST	1.1.1.1	192.168.2.9	0x5b12	No error (0)	a0csk8ze4b.puzztake.com	hpq1jzhlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024902105 CEST	1.1.1.1	192.168.2.9	0xee	No error (0)	prebid.cootlogix.com	a0csk8ze4b.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024902105 CEST	1.1.1.1	192.168.2.9	0xee	No error (0)	a0csk8ze4b.puzztake.com	hpq1jzhlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.024902105 CEST	1.1.1.1	192.168.2.9	0xee	No error (0)	hpq1jzhlb.puzztake.com		159.203.178.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.024902105 CEST	1.1.1.1	192.168.2.9	0xee	No error (0)	hpq1jzhlb.puzztake.com		159.65.235.129	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		3.73.169.240	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		18.159.201.246	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		3.121.104.202	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		3.124.145.80	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		3.72.203.236	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		3.78.200.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		52.28.164.13	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.042196035 CEST	1.1.1.1	192.168.2.9	0xa56c	No error (0)	btlr-eu-central-1.sharethrough.com		52.58.156.106	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.044203043 CEST	1.1.1.1	192.168.2.9	0x6a0b	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.101540089 CEST	1.1.1.1	192.168.2.9	0x6ec4	No error (0)	imps.monu.delivery		35.186.236.140	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.559861898 CEST	1.1.1.1	192.168.2.9	0x3183	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.559861898 CEST	1.1.1.1	192.168.2.9	0x3183	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.559861898 CEST	1.1.1.1	192.168.2.9	0x3183	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.559861898 CEST	1.1.1.1	192.168.2.9	0x3183	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.684830904 CEST	1.1.1.1	192.168.2.9	0xadd2	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.729674101 CEST	1.1.1.1	192.168.2.9	0x3f9b	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.729680061 CEST	1.1.1.1	192.168.2.9	0x9a93	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.729680061 CEST	1.1.1.1	192.168.2.9	0x9a93	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.729680061 CEST	1.1.1.1	192.168.2.9	0x9a93	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.729680061 CEST	1.1.1.1	192.168.2.9	0x9a93	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.729680061 CEST	1.1.1.1	192.168.2.9	0x9a93	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.752897024 CEST	1.1.1.1	192.168.2.9	0x4b40	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.786072016 CEST	1.1.1.1	192.168.2.9	0x56bf	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.790834904 CEST	1.1.1.1	192.168.2.9	0x2568	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.790834904 CEST	1.1.1.1	192.168.2.9	0x2568	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794543982 CEST	1.1.1.1	192.168.2.9	0xff30	No error (0)	api.id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.794564009 CEST	1.1.1.1	192.168.2.9	0xd5e4	No error (0)	imps.monu.delivery		35.186.236.140	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.912033081 CEST	1.1.1.1	192.168.2.9	0x4617	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.912033081 CEST	1.1.1.1	192.168.2.9	0x4617	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.912033081 CEST	1.1.1.1	192.168.2.9	0x4617	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.912033081 CEST	1.1.1.1	192.168.2.9	0x4617	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:31.912040949 CEST	1.1.1.1	192.168.2.9	0xdc08	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:31.926480055 CEST	1.1.1.1	192.168.2.9	0x4636	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.133099079 CEST	1.1.1.1	192.168.2.9	0xc1c4	No error (0)	exchange.kueezrtb.com	exchangekueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.133099079 CEST	1.1.1.1	192.168.2.9	0xc1c4	No error (0)	exchangekueez.cootlogix.com	asw8zbfaxs.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.133099079 CEST	1.1.1.1	192.168.2.9	0xc1c4	No error (0)	asw8zbfaxs.puzztake.com	hob9zeclb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.133099079 CEST	1.1.1.1	192.168.2.9	0xc1c4	No error (0)	hob9zeclb.puzztake.com		147.182.216.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.133099079 CEST	1.1.1.1	192.168.2.9	0xc1c4	No error (0)	hob9zeclb.puzztake.com		143.198.182.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.137819052 CEST	1.1.1.1	192.168.2.9	0x5402	No error (0)	exchange.kueezrtb.com	exchangekueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.137819052 CEST	1.1.1.1	192.168.2.9	0x5402	No error (0)	exchangekueez.cootlogix.com	asw8zbfaxs.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.137819052 CEST	1.1.1.1	192.168.2.9	0x5402	No error (0)	asw8zbfaxs.puzztake.com	hob9zeclb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.375334978 CEST	1.1.1.1	192.168.2.9	0x4a0a	No error (0)	track.kueezrtb.com		172.67.21.232	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.375334978 CEST	1.1.1.1	192.168.2.9	0x4a0a	No error (0)	track.kueezrtb.com		104.22.34.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.375334978 CEST	1.1.1.1	192.168.2.9	0x4a0a	No error (0)	track.kueezrtb.com		104.22.35.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.375350952 CEST	1.1.1.1	192.168.2.9	0xd0cb	No error (0)	track.kueezrtb.com			65	IN (0x0001)	false
May 21, 2024 11:21:32.375361919 CEST	1.1.1.1	192.168.2.9	0xf8ed	No error (0)	gtrack.kueezrtb.com			65	IN (0x0001)	false
May 21, 2024 11:21:32.375380039 CEST	1.1.1.1	192.168.2.9	0x6fec	No error (0)	gtrack.kueezrtb.com		104.22.35.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.375380039 CEST	1.1.1.1	192.168.2.9	0x6fec	No error (0)	gtrack.kueezrtb.com		104.22.34.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.375380039 CEST	1.1.1.1	192.168.2.9	0x6fec	No error (0)	gtrack.kueezrtb.com		172.67.21.232	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380362034 CEST	1.1.1.1	192.168.2.9	0xe08	No error (0)	config.aps.amazon-adsystem.com		18.245.31.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380362034 CEST	1.1.1.1	192.168.2.9	0xe08	No error (0)	config.aps.amazon-adsystem.com		18.245.31.92	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380362034 CEST	1.1.1.1	192.168.2.9	0xe08	No error (0)	config.aps.amazon-adsystem.com		18.245.31.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380362034 CEST	1.1.1.1	192.168.2.9	0xe08	No error (0)	config.aps.amazon-adsystem.com		18.245.31.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380384922 CEST	1.1.1.1	192.168.2.9	0x5399	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.380384922 CEST	1.1.1.1	192.168.2.9	0x5399	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380384922 CEST	1.1.1.1	192.168.2.9	0x5399	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380384922 CEST	1.1.1.1	192.168.2.9	0x5399	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.380384922 CEST	1.1.1.1	192.168.2.9	0x5399	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.61	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.381982088 CEST	1.1.1.1	192.168.2.9	0x58dd	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.381994963 CEST	1.1.1.1	192.168.2.9	0x92ed	No error (0)	client.aps.amazon-adsystem.com		13.32.121.91	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.381994963 CEST	1.1.1.1	192.168.2.9	0x92ed	No error (0)	client.aps.amazon-adsystem.com		13.32.121.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.381994963 CEST	1.1.1.1	192.168.2.9	0x92ed	No error (0)	client.aps.amazon-adsystem.com		13.32.121.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.381994963 CEST	1.1.1.1	192.168.2.9	0x92ed	No error (0)	client.aps.amazon-adsystem.com		13.32.121.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.755662918 CEST	1.1.1.1	192.168.2.9	0x2047	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.884927034 CEST	1.1.1.1	192.168.2.9	0xa2b3	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.904581070 CEST	1.1.1.1	192.168.2.9	0x4443	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.907258034 CEST	1.1.1.1	192.168.2.9	0xe555	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:32.907258034 CEST	1.1.1.1	192.168.2.9	0xe555	No error (0)	hb.digbearings.com		34.251.30.134	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.907258034 CEST	1.1.1.1	192.168.2.9	0xe555	No error (0)	hb.digbearings.com		52.31.183.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.907258034 CEST	1.1.1.1	192.168.2.9	0xe555	No error (0)	hb.digbearings.com		54.195.141.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.907258034 CEST	1.1.1.1	192.168.2.9	0xe555	No error (0)	hb.digbearings.com		52.210.1.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.907258034 CEST	1.1.1.1	192.168.2.9	0xe555	No error (0)	hb.digbearings.com		54.171.119.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:32.907258034 CEST	1.1.1.1	192.168.2.9	0xe555	No error (0)	hb.digbearings.com		52.209.216.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		54.76.86.242	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		54.77.79.252	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		108.129.15.138	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		52.215.214.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		54.77.248.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.010206938 CEST	1.1.1.1	192.168.2.9	0xcb16	No error (0)	g2.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.071212053 CEST	1.1.1.1	192.168.2.9	0x4305	No error (0)	prebid.cootlogix.com	a0csk8ze4b.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.071212053 CEST	1.1.1.1	192.168.2.9	0x4305	No error (0)	a0csk8ze4b.puzztake.com	hpq1jzhlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.071224928 CEST	1.1.1.1	192.168.2.9	0x8e60	No error (0)	prebid.cootlogix.com	a0csk8ze4b.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.071224928 CEST	1.1.1.1	192.168.2.9	0x8e60	No error (0)	a0csk8ze4b.puzztake.com	hpq1jzhlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.071224928 CEST	1.1.1.1	192.168.2.9	0x8e60	No error (0)	hpq1jzhlb.puzztake.com		159.223.146.222	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.071224928 CEST	1.1.1.1	192.168.2.9	0x8e60	No error (0)	hpq1jzhlb.puzztake.com		142.93.124.237	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.082010984 CEST	1.1.1.1	192.168.2.9	0x9ce4	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.082020998 CEST	1.1.1.1	192.168.2.9	0x1b8c	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.082020998 CEST	1.1.1.1	192.168.2.9	0x1b8c	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.151	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.082020998 CEST	1.1.1.1	192.168.2.9	0x1b8c	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.125235081 CEST	1.1.1.1	192.168.2.9	0x5a87	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.125248909 CEST	1.1.1.1	192.168.2.9	0x8c78	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.276741982 CEST	1.1.1.1	192.168.2.9	0xf228	No error (0)	u.kueezrtb.com			65	IN (0x0001)	false
May 21, 2024 11:21:33.276756048 CEST	1.1.1.1	192.168.2.9	0xd695	No error (0)	u.kueezrtb.com		104.22.34.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.276756048 CEST	1.1.1.1	192.168.2.9	0xd695	No error (0)	u.kueezrtb.com		104.22.35.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.276756048 CEST	1.1.1.1	192.168.2.9	0xd695	No error (0)	u.kueezrtb.com		172.67.21.232	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.458313942 CEST	1.1.1.1	192.168.2.9	0xc83f	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.461142063 CEST	1.1.1.1	192.168.2.9	0x4d5c	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.467745066 CEST	1.1.1.1	192.168.2.9	0xf3de	No error (0)	some.growplow.events		188.114.96.3	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.467745066 CEST	1.1.1.1	192.168.2.9	0xf3de	No error (0)	some.growplow.events		188.114.97.3	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.472573042 CEST	1.1.1.1	192.168.2.9	0x441a	No error (0)	some.growplow.events			65	IN (0x0001)	false
May 21, 2024 11:21:33.866590977 CEST	1.1.1.1	192.168.2.9	0xc859	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.866590977 CEST	1.1.1.1	192.168.2.9	0xc859	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.6.136	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:33.871191978 CEST	1.1.1.1	192.168.2.9	0xdd46	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.892869949 CEST	1.1.1.1	192.168.2.9	0xb8dc	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.892869949 CEST	1.1.1.1	192.168.2.9	0xb8dc	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.892869949 CEST	1.1.1.1	192.168.2.9	0xb8dc	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.892904997 CEST	1.1.1.1	192.168.2.9	0x366	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.892904997 CEST	1.1.1.1	192.168.2.9	0x366	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.892904997 CEST	1.1.1.1	192.168.2.9	0x366	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:33.892904997 CEST	1.1.1.1	192.168.2.9	0x366	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.244.15.236	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:34.354413033 CEST	1.1.1.1	192.168.2.9	0x4fc6	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:34.354429960 CEST	1.1.1.1	192.168.2.9	0xd5b4	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:34.354429960 CEST	1.1.1.1	192.168.2.9	0xd5b4	No error (0)	www3.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.423336029 CEST	1.1.1.1	192.168.2.9	0xe773	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.424977064 CEST	1.1.1.1	192.168.2.9	0x42b2	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.424977064 CEST	1.1.1.1	192.168.2.9	0x42b2	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.11	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.424977064 CEST	1.1.1.1	192.168.2.9	0x42b2	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.424977064 CEST	1.1.1.1	192.168.2.9	0x42b2	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.127	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.424977064 CEST	1.1.1.1	192.168.2.9	0x42b2	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.88	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.429624081 CEST	1.1.1.1	192.168.2.9	0x865a	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429647923 CEST	1.1.1.1	192.168.2.9	0xef3d	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429658890 CEST	1.1.1.1	192.168.2.9	0x8dd7	No error (0)	sync.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429658890 CEST	1.1.1.1	192.168.2.9	0x8dd7	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.429658890 CEST	1.1.1.1	192.168.2.9	0x8dd7	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.429658890 CEST	1.1.1.1	192.168.2.9	0x8dd7	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.429668903 CEST	1.1.1.1	192.168.2.9	0x7d23	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429678917 CEST	1.1.1.1	192.168.2.9	0xfcb	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429678917 CEST	1.1.1.1	192.168.2.9	0xfcb	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429678917 CEST	1.1.1.1	192.168.2.9	0xfcb	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429678917 CEST	1.1.1.1	192.168.2.9	0xfcb	No error (0)	ao9ui4chmm.puzztake.com	h7mzk9dlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.429678917 CEST	1.1.1.1	192.168.2.9	0xfcb	No error (0)	h7mzk9dlb.puzztake.com		134.122.125.115	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.429678917 CEST	1.1.1.1	192.168.2.9	0xfcb	No error (0)	h7mzk9dlb.puzztake.com		134.122.117.207	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.429697990 CEST	1.1.1.1	192.168.2.9	0xc4dc	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.434412003 CEST	1.1.1.1	192.168.2.9	0x60a4	No error (0)	sync.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.439213037 CEST	1.1.1.1	192.168.2.9	0xa0aa	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.439213037 CEST	1.1.1.1	192.168.2.9	0xa0aa	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.439213037 CEST	1.1.1.1	192.168.2.9	0xa0aa	No error (0)	hj5ozcalb.puzztake.com		159.223.96.127	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.439213037 CEST	1.1.1.1	192.168.2.9	0xa0aa	No error (0)	hj5ozcalb.puzztake.com		143.198.162.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.439224958 CEST	1.1.1.1	192.168.2.9	0x60a4	No error (0)	cs.seedtag.com			65	IN (0x0001)	false
May 21, 2024 11:21:35.439235926 CEST	1.1.1.1	192.168.2.9	0x2447	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.439235926 CEST	1.1.1.1	192.168.2.9	0x2447	No error (0)	ao9ui4chmm.puzztake.com	h7mzk9dlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.439244986 CEST	1.1.1.1	192.168.2.9	0x9ed7	No error (0)	cs.seedtag.com		104.16.183.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.439244986 CEST	1.1.1.1	192.168.2.9	0x9ed7	No error (0)	cs.seedtag.com		104.16.185.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.439244986 CEST	1.1.1.1	192.168.2.9	0x9ed7	No error (0)	cs.seedtag.com		104.16.184.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.439244986 CEST	1.1.1.1	192.168.2.9	0x9ed7	No error (0)	cs.seedtag.com		104.16.186.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.439244986 CEST	1.1.1.1	192.168.2.9	0x9ed7	No error (0)	cs.seedtag.com		104.16.187.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.466083050 CEST	1.1.1.1	192.168.2.9	0xdba3	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.466083050 CEST	1.1.1.1	192.168.2.9	0xdba3	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.466083050 CEST	1.1.1.1	192.168.2.9	0xdba3	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.466083050 CEST	1.1.1.1	192.168.2.9	0xdba3	No error (0)	ao9ui4chmm.puzztake.com	h7mzk9dlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.677360058 CEST	1.1.1.1	192.168.2.9	0xde80	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.677360058 CEST	1.1.1.1	192.168.2.9	0xde80	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.677360058 CEST	1.1.1.1	192.168.2.9	0xde80	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.677375078 CEST	1.1.1.1	192.168.2.9	0x2145	No error (0)	contextual.media.net		2.18.96.18	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.677388906 CEST	1.1.1.1	192.168.2.9	0x929b	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.690917015 CEST	1.1.1.1	192.168.2.9	0x776a	No error (0)	bloggernetwork-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.690917015 CEST	1.1.1.1	192.168.2.9	0x776a	No error (0)	bloggernetwork-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.905872107 CEST	1.1.1.1	192.168.2.9	0xe686	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.905921936 CEST	1.1.1.1	192.168.2.9	0x7379	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.905921936 CEST	1.1.1.1	192.168.2.9	0x7379	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:35.912554979 CEST	1.1.1.1	192.168.2.9	0xbcf6	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.912554979 CEST	1.1.1.1	192.168.2.9	0xbcf6	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.912569046 CEST	1.1.1.1	192.168.2.9	0x806a	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:35.912569046 CEST	1.1.1.1	192.168.2.9	0x806a	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:36.438266993 CEST	1.1.1.1	192.168.2.9	0xe795	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.137548923 CEST	1.1.1.1	192.168.2.9	0xb19c	No error (0)	u.kueezrtb.com		172.67.21.232	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.137548923 CEST	1.1.1.1	192.168.2.9	0xb19c	No error (0)	u.kueezrtb.com		104.22.34.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.137548923 CEST	1.1.1.1	192.168.2.9	0xb19c	No error (0)	u.kueezrtb.com		104.22.35.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.142582893 CEST	1.1.1.1	192.168.2.9	0x1d1e	No error (0)	u.kueezrtb.com			65	IN (0x0001)	false
May 21, 2024 11:21:39.142595053 CEST	1.1.1.1	192.168.2.9	0xe988	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.142595053 CEST	1.1.1.1	192.168.2.9	0xe988	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.142595053 CEST	1.1.1.1	192.168.2.9	0xe988	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.142604113 CEST	1.1.1.1	192.168.2.9	0x29c	No error (0)	btloader.com			65	IN (0x0001)	false
May 21, 2024 11:21:39.148065090 CEST	1.1.1.1	192.168.2.9	0x7e12	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 21, 2024 11:21:39.148073912 CEST	1.1.1.1	192.168.2.9	0x1ca7	No error (0)	aax-eu.amazon-adsystem.com		52.94.223.37	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.148083925 CEST	1.1.1.1	192.168.2.9	0x66f2	No error (0)	securepubads.g.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.148092985 CEST	1.1.1.1	192.168.2.9	0xa6ca	No error (0)	cdn.id5-sync.com		104.22.53.86	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.148092985 CEST	1.1.1.1	192.168.2.9	0xa6ca	No error (0)	cdn.id5-sync.com		104.22.52.86	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.148092985 CEST	1.1.1.1	192.168.2.9	0xa6ca	No error (0)	cdn.id5-sync.com		172.67.38.106	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.148112059 CEST	1.1.1.1	192.168.2.9	0x91af	No error (0)	cdn.id5-sync.com			65	IN (0x0001)	false
May 21, 2024 11:21:39.176654100 CEST	1.1.1.1	192.168.2.9	0xdf62	No error (0)	tags.crwdcntrl.net		65.9.66.68	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.176654100 CEST	1.1.1.1	192.168.2.9	0xdf62	No error (0)	tags.crwdcntrl.net		65.9.66.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.176654100 CEST	1.1.1.1	192.168.2.9	0xdf62	No error (0)	tags.crwdcntrl.net		65.9.66.97	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.176654100 CEST	1.1.1.1	192.168.2.9	0xdf62	No error (0)	tags.crwdcntrl.net		65.9.66.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.201270103 CEST	1.1.1.1	192.168.2.9	0xd0c3	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:39.202122927 CEST	1.1.1.1	192.168.2.9	0x66e7	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:39.202122927 CEST	1.1.1.1	192.168.2.9	0x66e7	No error (0)	d2avimlm6gq3h9.cloudfront.net		18.173.210.195	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.462587118 CEST	1.1.1.1	192.168.2.9	0x76fa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:39.462587118 CEST	1.1.1.1	192.168.2.9	0x76fa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:39.616149902 CEST	1.1.1.1	192.168.2.9	0x2f70	No error (0)	pagead-googlehosted.l.google.com		142.250.185.129	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.712908983 CEST	1.1.1.1	192.168.2.9	0xc7ca	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.712914944 CEST	1.1.1.1	192.168.2.9	0x32c5	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.712914944 CEST	1.1.1.1	192.168.2.9	0x32c5	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.712914944 CEST	1.1.1.1	192.168.2.9	0x32c5	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.712914944 CEST	1.1.1.1	192.168.2.9	0x32c5	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.719398975 CEST	1.1.1.1	192.168.2.9	0x94ef	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.719398975 CEST	1.1.1.1	192.168.2.9	0x94ef	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.719413042 CEST	1.1.1.1	192.168.2.9	0xf6b6	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.719413042 CEST	1.1.1.1	192.168.2.9	0xf6b6	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.719413042 CEST	1.1.1.1	192.168.2.9	0xf6b6	No error (0)	pugm-lhrc.pubmnet.com		185.64.190.78	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.719418049 CEST	1.1.1.1	192.168.2.9	0x542a	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724133015 CEST	1.1.1.1	192.168.2.9	0xdb5c	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724133015 CEST	1.1.1.1	192.168.2.9	0xdb5c	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724133015 CEST	1.1.1.1	192.168.2.9	0xdb5c	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724133015 CEST	1.1.1.1	192.168.2.9	0xdb5c	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724139929 CEST	1.1.1.1	192.168.2.9	0xfc2e	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724139929 CEST	1.1.1.1	192.168.2.9	0xfc2e	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724139929 CEST	1.1.1.1	192.168.2.9	0xfc2e	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724152088 CEST	1.1.1.1	192.168.2.9	0x46e0	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724152088 CEST	1.1.1.1	192.168.2.9	0x46e0	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724155903 CEST	1.1.1.1	192.168.2.9	0x8243	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724155903 CEST	1.1.1.1	192.168.2.9	0x8243	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724155903 CEST	1.1.1.1	192.168.2.9	0x8243	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724155903 CEST	1.1.1.1	192.168.2.9	0x8243	No error (0)	chidc2.outbrain.org		64.74.236.223	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724172115 CEST	1.1.1.1	192.168.2.9	0xe3c1	No error (0)	sync.richaudience.com		162.55.236.224	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724179029 CEST	1.1.1.1	192.168.2.9	0xb8d4	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724179029 CEST	1.1.1.1	192.168.2.9	0xb8d4	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724193096 CEST	1.1.1.1	192.168.2.9	0x7d15	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724198103 CEST	1.1.1.1	192.168.2.9	0x761b	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724206924 CEST	1.1.1.1	192.168.2.9	0xeab9	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724206924 CEST	1.1.1.1	192.168.2.9	0xeab9	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		79.125.111.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		63.32.195.109	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		52.208.202.34	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		52.214.70.149	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		54.246.180.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		52.51.146.36	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		52.48.59.220	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.724216938 CEST	1.1.1.1	192.168.2.9	0xdda	No error (0)	euw-ice.360yield.com		99.81.59.238	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727864981 CEST	1.1.1.1	192.168.2.9	0x5e22	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727871895 CEST	1.1.1.1	192.168.2.9	0xd833	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727871895 CEST	1.1.1.1	192.168.2.9	0xd833	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.727876902 CEST	1.1.1.1	192.168.2.9	0x9a84	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.727880955 CEST	1.1.1.1	192.168.2.9	0x5e05	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.727880955 CEST	1.1.1.1	192.168.2.9	0x5e05	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.727880955 CEST	1.1.1.1	192.168.2.9	0x5e05	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.727885962 CEST	1.1.1.1	192.168.2.9	0x158b	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
May 21, 2024 11:21:41.727895975 CEST	1.1.1.1	192.168.2.9	0xbdab	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.728878975 CEST	1.1.1.1	192.168.2.9	0xd218	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.728878975 CEST	1.1.1.1	192.168.2.9	0xd218	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.728878975 CEST	1.1.1.1	192.168.2.9	0xd218	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.728878975 CEST	1.1.1.1	192.168.2.9	0xd218	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.728878975 CEST	1.1.1.1	192.168.2.9	0xd218	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.728887081 CEST	1.1.1.1	192.168.2.9	0xf17d	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.728887081 CEST	1.1.1.1	192.168.2.9	0xf17d	No error (0)	pixel.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.728887081 CEST	1.1.1.1	192.168.2.9	0xf17d	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.728890896 CEST	1.1.1.1	192.168.2.9	0xd13	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.733597040 CEST	1.1.1.1	192.168.2.9	0xfe3e	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.733602047 CEST	1.1.1.1	192.168.2.9	0x1b58	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733602047 CEST	1.1.1.1	192.168.2.9	0x1b58	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733602047 CEST	1.1.1.1	192.168.2.9	0x1b58	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733602047 CEST	1.1.1.1	192.168.2.9	0x1b58	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733602047 CEST	1.1.1.1	192.168.2.9	0x1b58	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733602047 CEST	1.1.1.1	192.168.2.9	0x1b58	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.67.74.124	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.126.233	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.104.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.76.227.135	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		54.93.136.21	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		35.158.176.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733612061 CEST	1.1.1.1	192.168.2.9	0xfc2f	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.126.53.178	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.733616114 CEST	1.1.1.1	192.168.2.9	0xe063	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735693932 CEST	1.1.1.1	192.168.2.9	0x2a11	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735698938 CEST	1.1.1.1	192.168.2.9	0xc05a	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735698938 CEST	1.1.1.1	192.168.2.9	0xc05a	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735698938 CEST	1.1.1.1	192.168.2.9	0xc05a	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735708952 CEST	1.1.1.1	192.168.2.9	0xf577	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735708952 CEST	1.1.1.1	192.168.2.9	0xf577	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.234	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.132.111	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.200.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.133.0	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.165.110	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735713005 CEST	1.1.1.1	192.168.2.9	0xe209	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.234.213	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735722065 CEST	1.1.1.1	192.168.2.9	0x1021	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735722065 CEST	1.1.1.1	192.168.2.9	0x1021	No error (0)	1.cpm.ak-is2.net		77.245.57.72	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735726118 CEST	1.1.1.1	192.168.2.9	0x216f	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		34.254.84.230	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		34.246.236.2	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		34.240.216.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		52.214.140.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		34.251.183.115	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		34.249.65.85	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		34.255.48.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.735734940 CEST	1.1.1.1	192.168.2.9	0x4ba0	No error (0)	match.prod.bidr.io		52.48.246.250	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.740463972 CEST	1.1.1.1	192.168.2.9	0xb595	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.740473032 CEST	1.1.1.1	192.168.2.9	0xf555	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.740488052 CEST	1.1.1.1	192.168.2.9	0xc36e	No error (0)	ads.us.e-planning.net		193.3.178.3	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.757299900 CEST	1.1.1.1	192.168.2.9	0x8cd7	No error (0)	1x1.a-mo.net		44.193.116.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.757299900 CEST	1.1.1.1	192.168.2.9	0x8cd7	No error (0)	1x1.a-mo.net		52.6.243.201	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.757299900 CEST	1.1.1.1	192.168.2.9	0x8cd7	No error (0)	1x1.a-mo.net		35.169.192.160	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.757299900 CEST	1.1.1.1	192.168.2.9	0x8cd7	No error (0)	1x1.a-mo.net		54.88.122.97	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.757299900 CEST	1.1.1.1	192.168.2.9	0x8cd7	No error (0)	1x1.a-mo.net		174.129.36.51	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.757299900 CEST	1.1.1.1	192.168.2.9	0x8cd7	No error (0)	1x1.a-mo.net		3.233.197.152	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:41.919730902 CEST	1.1.1.1	192.168.2.9	0xba9	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:41.919740915 CEST	1.1.1.1	192.168.2.9	0xe8c7	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048612118 CEST	1.1.1.1	192.168.2.9	0xb132	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		99.80.30.120	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.211.244.182	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.253.100.47	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.17.205.185	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		63.33.255.203	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		99.80.184.135	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.72.0.237	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048620939 CEST	1.1.1.1	192.168.2.9	0x93ae	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.74.69	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.048634052 CEST	1.1.1.1	192.168.2.9	0xfcb1	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048634052 CEST	1.1.1.1	192.168.2.9	0xfcb1	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048634052 CEST	1.1.1.1	192.168.2.9	0xfcb1	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048634052 CEST	1.1.1.1	192.168.2.9	0xfcb1	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.048830986 CEST	1.1.1.1	192.168.2.9	0xc6b9	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.053761959 CEST	1.1.1.1	192.168.2.9	0xe260	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.053761959 CEST	1.1.1.1	192.168.2.9	0xe260	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.078532934 CEST	1.1.1.1	192.168.2.9	0x7aec	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.078548908 CEST	1.1.1.1	192.168.2.9	0x5e5f	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.078552961 CEST	1.1.1.1	192.168.2.9	0x973d	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.078552961 CEST	1.1.1.1	192.168.2.9	0x973d	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.078552961 CEST	1.1.1.1	192.168.2.9	0x973d	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.078567982 CEST	1.1.1.1	192.168.2.9	0x1524	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.078567982 CEST	1.1.1.1	192.168.2.9	0x1524	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:42.078577042 CEST	1.1.1.1	192.168.2.9	0x8cdf	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.078577042 CEST	1.1.1.1	192.168.2.9	0x8cdf	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:42.078582048 CEST	1.1.1.1	192.168.2.9	0x8070	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.240014076 CEST	1.1.1.1	192.168.2.9	0x4019	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.240014076 CEST	1.1.1.1	192.168.2.9	0x4019	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.240014076 CEST	1.1.1.1	192.168.2.9	0x4019	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.240014076 CEST	1.1.1.1	192.168.2.9	0x4019	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.138.8.164	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.240029097 CEST	1.1.1.1	192.168.2.9	0xc49f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.240029097 CEST	1.1.1.1	192.168.2.9	0xc49f	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.6.136	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.244539976 CEST	1.1.1.1	192.168.2.9	0x57c1	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.244559050 CEST	1.1.1.1	192.168.2.9	0x476	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.244559050 CEST	1.1.1.1	192.168.2.9	0x476	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.244559050 CEST	1.1.1.1	192.168.2.9	0x476	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.366769075 CEST	1.1.1.1	192.168.2.9	0x789e	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.366769075 CEST	1.1.1.1	192.168.2.9	0x789e	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.366769075 CEST	1.1.1.1	192.168.2.9	0x789e	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.366769075 CEST	1.1.1.1	192.168.2.9	0x789e	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.366784096 CEST	1.1.1.1	192.168.2.9	0xcf23	No error (0)	api.intentiq.com		13.32.121.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.366784096 CEST	1.1.1.1	192.168.2.9	0xcf23	No error (0)	api.intentiq.com		13.32.121.33	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.366784096 CEST	1.1.1.1	192.168.2.9	0xcf23	No error (0)	api.intentiq.com		13.32.121.10	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.366784096 CEST	1.1.1.1	192.168.2.9	0xcf23	No error (0)	api.intentiq.com		13.32.121.106	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.469779015 CEST	1.1.1.1	192.168.2.9	0x1fa	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.469779015 CEST	1.1.1.1	192.168.2.9	0x1fa	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.469779015 CEST	1.1.1.1	192.168.2.9	0x1fa	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.478873014 CEST	1.1.1.1	192.168.2.9	0x211c	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.605835915 CEST	1.1.1.1	192.168.2.9	0x4041	No error (0)	video.primis.tech	d3cht5btq2kl2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.605853081 CEST	1.1.1.1	192.168.2.9	0xaaa0	No error (0)	video.primis.tech	d3cht5btq2kl2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.605853081 CEST	1.1.1.1	192.168.2.9	0xaaa0	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.29	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.605853081 CEST	1.1.1.1	192.168.2.9	0xaaa0	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.114	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.605853081 CEST	1.1.1.1	192.168.2.9	0xaaa0	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.605853081 CEST	1.1.1.1	192.168.2.9	0xaaa0	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.7	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.843005896 CEST	1.1.1.1	192.168.2.9	0x76a4	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.843005896 CEST	1.1.1.1	192.168.2.9	0x76a4	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.843022108 CEST	1.1.1.1	192.168.2.9	0x8c15	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.848108053 CEST	1.1.1.1	192.168.2.9	0xce80	No error (0)	api-2-0.spot.im		18.245.31.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.848108053 CEST	1.1.1.1	192.168.2.9	0xce80	No error (0)	api-2-0.spot.im		18.245.31.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.848108053 CEST	1.1.1.1	192.168.2.9	0xce80	No error (0)	api-2-0.spot.im		18.245.31.19	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.848108053 CEST	1.1.1.1	192.168.2.9	0xce80	No error (0)	api-2-0.spot.im		18.245.31.128	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.873437881 CEST	1.1.1.1	192.168.2.9	0x477b	No error (0)	gum.aidemsrv.com		104.17.43.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.873437881 CEST	1.1.1.1	192.168.2.9	0x477b	No error (0)	gum.aidemsrv.com		104.17.44.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.873460054 CEST	1.1.1.1	192.168.2.9	0xe3f	No error (0)	gum.aidemsrv.com			65	IN (0x0001)	false
May 21, 2024 11:21:44.943609953 CEST	1.1.1.1	192.168.2.9	0x18af	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.943609953 CEST	1.1.1.1	192.168.2.9	0x18af	No error (0)	image8-v2.pubmnet.com	imagesync-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.943609953 CEST	1.1.1.1	192.168.2.9	0x18af	No error (0)	imagesync-lhrc.pubmnet.com		185.64.190.79	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943638086 CEST	1.1.1.1	192.168.2.9	0x7ad0	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.943638086 CEST	1.1.1.1	192.168.2.9	0x7ad0	No error (0)	image8-v2.pubmnet.com	imagesync-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		54.164.74.54	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		52.86.155.245	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		54.166.39.70	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		54.204.12.49	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		54.164.102.167	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		54.175.113.230	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		54.166.67.31	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.943649054 CEST	1.1.1.1	192.168.2.9	0x4445	No error (0)	sync.srv.stackadapt.com		54.167.137.47	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945502996 CEST	1.1.1.1	192.168.2.9	0x1259	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.945518970 CEST	1.1.1.1	192.168.2.9	0xa63f	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		23.21.235.121	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		54.92.231.183	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		107.22.9.250	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		35.172.16.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		35.170.183.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		18.213.199.61	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		54.90.213.12	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:44.945529938 CEST	1.1.1.1	192.168.2.9	0x5e73	No error (0)	cs-server-s2s.yellowblue.io		18.235.112.164	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.021270037 CEST	1.1.1.1	192.168.2.9	0xa7f	No error (0)	cs.admanmedia.com		80.77.87.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.021286964 CEST	1.1.1.1	192.168.2.9	0x30e9	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.021286964 CEST	1.1.1.1	192.168.2.9	0x30e9	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.021286964 CEST	1.1.1.1	192.168.2.9	0x30e9	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		52.29.4.131	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.69.205.38	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.123.208.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.158.184.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.121.157.160	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.021297932 CEST	1.1.1.1	192.168.2.9	0x97a7	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.157.153.25	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.026127100 CEST	1.1.1.1	192.168.2.9	0x2f7	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.037976027 CEST	1.1.1.1	192.168.2.9	0x9e9d	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.037976027 CEST	1.1.1.1	192.168.2.9	0x9e9d	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.037976027 CEST	1.1.1.1	192.168.2.9	0x9e9d	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.093749046 CEST	1.1.1.1	192.168.2.9	0x93f1	No error (0)	player.aniview.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.093761921 CEST	1.1.1.1	192.168.2.9	0x35ce	No error (0)	player.aniview.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.76	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.196	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.109	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.75	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.170	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.197	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.245	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.123902082 CEST	1.1.1.1	192.168.2.9	0xb61b	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.171	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.128678083 CEST	1.1.1.1	192.168.2.9	0x4938	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.128678083 CEST	1.1.1.1	192.168.2.9	0x4938	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.427576065 CEST	1.1.1.1	192.168.2.9	0x7166	No error (0)	d3div1mtym39ic.cloudfront.net		13.32.121.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.427576065 CEST	1.1.1.1	192.168.2.9	0x7166	No error (0)	d3div1mtym39ic.cloudfront.net		13.32.121.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.427576065 CEST	1.1.1.1	192.168.2.9	0x7166	No error (0)	d3div1mtym39ic.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.427576065 CEST	1.1.1.1	192.168.2.9	0x7166	No error (0)	d3div1mtym39ic.cloudfront.net		13.32.121.91	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.479082108 CEST	1.1.1.1	192.168.2.9	0x2a1c	No error (0)	securepubads.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.479093075 CEST	1.1.1.1	192.168.2.9	0x2c3b	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 21, 2024 11:21:45.530208111 CEST	1.1.1.1	192.168.2.9	0x36cf	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.530208111 CEST	1.1.1.1	192.168.2.9	0x36cf	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.530208111 CEST	1.1.1.1	192.168.2.9	0x36cf	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.530220985 CEST	1.1.1.1	192.168.2.9	0xca05	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.530220985 CEST	1.1.1.1	192.168.2.9	0xca05	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.534013033 CEST	1.1.1.1	192.168.2.9	0x8e93	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.534013033 CEST	1.1.1.1	192.168.2.9	0x8e93	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.534013033 CEST	1.1.1.1	192.168.2.9	0x8e93	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.534013033 CEST	1.1.1.1	192.168.2.9	0x8e93	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.534024954 CEST	1.1.1.1	192.168.2.9	0x274c	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.534024954 CEST	1.1.1.1	192.168.2.9	0x274c	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.534024954 CEST	1.1.1.1	192.168.2.9	0x274c	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:45.610872030 CEST	1.1.1.1	192.168.2.9	0xd0f2	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.704555988 CEST	1.1.1.1	192.168.2.9	0x36d4	No error (0)	www.swisspass.ch		193.203.121.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.725234032 CEST	1.1.1.1	192.168.2.9	0x223	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:45.725234032 CEST	1.1.1.1	192.168.2.9	0x223	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.169442892 CEST	1.1.1.1	192.168.2.9	0x8c82	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.169459105 CEST	1.1.1.1	192.168.2.9	0x8e0e	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.198751926 CEST	1.1.1.1	192.168.2.9	0xf436	No error (0)	resources.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.198751926 CEST	1.1.1.1	192.168.2.9	0xf436	No error (0)	resources.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.198765039 CEST	1.1.1.1	192.168.2.9	0x3995	No error (0)	resources.infolinks.com			65	IN (0x0001)	false
May 21, 2024 11:21:46.262552977 CEST	1.1.1.1	192.168.2.9	0xe098	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.262552977 CEST	1.1.1.1	192.168.2.9	0xe098	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.405025005 CEST	1.1.1.1	192.168.2.9	0x49f7	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.461169004 CEST	1.1.1.1	192.168.2.9	0x77f6	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.461169004 CEST	1.1.1.1	192.168.2.9	0x77f6	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.461169004 CEST	1.1.1.1	192.168.2.9	0x77f6	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.461169004 CEST	1.1.1.1	192.168.2.9	0x77f6	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.461169004 CEST	1.1.1.1	192.168.2.9	0x77f6	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.461169004 CEST	1.1.1.1	192.168.2.9	0x77f6	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.461186886 CEST	1.1.1.1	192.168.2.9	0x7729	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.461186886 CEST	1.1.1.1	192.168.2.9	0x7729	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.642280102 CEST	1.1.1.1	192.168.2.9	0x14be	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.642293930 CEST	1.1.1.1	192.168.2.9	0xc6e9	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.648184061 CEST	1.1.1.1	192.168.2.9	0xfdcf	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.652952909 CEST	1.1.1.1	192.168.2.9	0x2185	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.711982012 CEST	1.1.1.1	192.168.2.9	0xbbc0	No error (0)	hde.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.711982012 CEST	1.1.1.1	192.168.2.9	0xbbc0	No error (0)	hde.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:46.863477945 CEST	1.1.1.1	192.168.2.9	0x217b	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.863477945 CEST	1.1.1.1	192.168.2.9	0x217b	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.863498926 CEST	1.1.1.1	192.168.2.9	0x5310	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.863498926 CEST	1.1.1.1	192.168.2.9	0x5310	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.890665054 CEST	1.1.1.1	192.168.2.9	0xc128	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.890665054 CEST	1.1.1.1	192.168.2.9	0xc128	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.890665054 CEST	1.1.1.1	192.168.2.9	0xc128	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.890688896 CEST	1.1.1.1	192.168.2.9	0x9072	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.890688896 CEST	1.1.1.1	192.168.2.9	0x9072	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:46.890688896 CEST	1.1.1.1	192.168.2.9	0x9072	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.184	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.183	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.185	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.169	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.164	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.168	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.165	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.181	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.167	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.176162958 CEST	1.1.1.1	192.168.2.9	0x3679	No error (0)	d5p.de17a.com		213.155.156.182	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.313328981 CEST	1.1.1.1	192.168.2.9	0x8ec9	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
May 21, 2024 11:21:47.313347101 CEST	1.1.1.1	192.168.2.9	0xadf6	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.313347101 CEST	1.1.1.1	192.168.2.9	0xadf6	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.322063923 CEST	1.1.1.1	192.168.2.9	0x3cd	No error (0)	d27la2n6wh4qws.cloudfront.net		18.66.121.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.322063923 CEST	1.1.1.1	192.168.2.9	0x3cd	No error (0)	d27la2n6wh4qws.cloudfront.net		18.66.121.158	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.322063923 CEST	1.1.1.1	192.168.2.9	0x3cd	No error (0)	d27la2n6wh4qws.cloudfront.net		18.66.121.218	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.322063923 CEST	1.1.1.1	192.168.2.9	0x3cd	No error (0)	d27la2n6wh4qws.cloudfront.net		18.66.121.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.364295959 CEST	1.1.1.1	192.168.2.9	0x61e2	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.427651882 CEST	1.1.1.1	192.168.2.9	0x39f0	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.493794918 CEST	1.1.1.1	192.168.2.9	0xb388	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.493794918 CEST	1.1.1.1	192.168.2.9	0xb388	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.493818998 CEST	1.1.1.1	192.168.2.9	0x2ac1	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.493818998 CEST	1.1.1.1	192.168.2.9	0x2ac1	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.493818998 CEST	1.1.1.1	192.168.2.9	0x2ac1	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.746679068 CEST	1.1.1.1	192.168.2.9	0x2a45	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.746679068 CEST	1.1.1.1	192.168.2.9	0x2a45	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.746700048 CEST	1.1.1.1	192.168.2.9	0xc00	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.746700048 CEST	1.1.1.1	192.168.2.9	0xc00	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:47.746700048 CEST	1.1.1.1	192.168.2.9	0xc00	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:47.836925030 CEST	1.1.1.1	192.168.2.9	0x377c	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.498902082 CEST	1.1.1.1	192.168.2.9	0x73a5	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:48.498920918 CEST	1.1.1.1	192.168.2.9	0xfa06	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:48.508493900 CEST	1.1.1.1	192.168.2.9	0x7797	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.533885956 CEST	1.1.1.1	192.168.2.9	0x289e	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
May 21, 2024 11:21:48.533902884 CEST	1.1.1.1	192.168.2.9	0x2895	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.533902884 CEST	1.1.1.1	192.168.2.9	0x2895	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.932701111 CEST	1.1.1.1	192.168.2.9	0x40f3	No error (0)	ws.rqtrk.eu		57.129.18.121	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.932701111 CEST	1.1.1.1	192.168.2.9	0x40f3	No error (0)	ws.rqtrk.eu		57.129.18.113	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.932701111 CEST	1.1.1.1	192.168.2.9	0x40f3	No error (0)	ws.rqtrk.eu		57.129.18.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.932701111 CEST	1.1.1.1	192.168.2.9	0x40f3	No error (0)	ws.rqtrk.eu		57.129.18.111	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:48.932701111 CEST	1.1.1.1	192.168.2.9	0x40f3	No error (0)	ws.rqtrk.eu		57.129.18.109	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052110910 CEST	1.1.1.1	192.168.2.9	0xb51e	No error (0)	cm.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		18.203.86.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.052129984 CEST	1.1.1.1	192.168.2.9	0x3673	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.392831087 CEST	1.1.1.1	192.168.2.9	0xd120	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:49.392831087 CEST	1.1.1.1	192.168.2.9	0xd120	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.392848015 CEST	1.1.1.1	192.168.2.9	0xe4e4	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:49.392858982 CEST	1.1.1.1	192.168.2.9	0x90f8	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:49.392858982 CEST	1.1.1.1	192.168.2.9	0x90f8	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.392868996 CEST	1.1.1.1	192.168.2.9	0xd040	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:49.627490997 CEST	1.1.1.1	192.168.2.9	0xafe4	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
May 21, 2024 11:21:49.627506018 CEST	1.1.1.1	192.168.2.9	0xd87a	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.627506018 CEST	1.1.1.1	192.168.2.9	0xd87a	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.627516985 CEST	1.1.1.1	192.168.2.9	0x1c3c	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
May 21, 2024 11:21:49.627526999 CEST	1.1.1.1	192.168.2.9	0x5c28	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:49.627526999 CEST	1.1.1.1	192.168.2.9	0x5c28	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:51.528763056 CEST	1.1.1.1	192.168.2.9	0xe4f9	No error (0)	cr.frontend.weborama.fr		34.111.129.221	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:51.917414904 CEST	1.1.1.1	192.168.2.9	0xa511	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:51.917414904 CEST	1.1.1.1	192.168.2.9	0xa511	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:51.917414904 CEST	1.1.1.1	192.168.2.9	0xa511	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:51.976969957 CEST	1.1.1.1	192.168.2.9	0xfc5	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 21, 2024 11:21:52.687077045 CEST	1.1.1.1	192.168.2.9	0xb86b	No error (0)	video.primis.tech	d3cht5btq2kl2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:52.687077045 CEST	1.1.1.1	192.168.2.9	0xb86b	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.7	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:52.687077045 CEST	1.1.1.1	192.168.2.9	0xb86b	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.114	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:52.687077045 CEST	1.1.1.1	192.168.2.9	0xb86b	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:52.687077045 CEST	1.1.1.1	192.168.2.9	0xb86b	No error (0)	d3cht5btq2kl2s.cloudfront.net		108.138.26.29	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:52.687089920 CEST	1.1.1.1	192.168.2.9	0x117c	No error (0)	video.primis.tech	d3cht5btq2kl2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.461344004 CEST	1.1.1.1	192.168.2.9	0xaa8b	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.461344004 CEST	1.1.1.1	192.168.2.9	0xaa8b	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.461344004 CEST	1.1.1.1	192.168.2.9	0xaa8b	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.461355925 CEST	1.1.1.1	192.168.2.9	0x5864	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.461366892 CEST	1.1.1.1	192.168.2.9	0xb8d0	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.461366892 CEST	1.1.1.1	192.168.2.9	0xb8d0	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.31.50.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.461366892 CEST	1.1.1.1	192.168.2.9	0xb8d0	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.207.242	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.461366892 CEST	1.1.1.1	192.168.2.9	0xb8d0	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.76.221.56	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.461366892 CEST	1.1.1.1	192.168.2.9	0xb8d0	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.240.80.220	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.461386919 CEST	1.1.1.1	192.168.2.9	0xd9b8	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.461396933 CEST	1.1.1.1	192.168.2.9	0xdf4c	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		18.203.86.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465884924 CEST	1.1.1.1	192.168.2.9	0x4d97	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465895891 CEST	1.1.1.1	192.168.2.9	0x7dba	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465909958 CEST	1.1.1.1	192.168.2.9	0xc0a7	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
May 21, 2024 11:21:53.465918064 CEST	1.1.1.1	192.168.2.9	0x66aa	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.465930939 CEST	1.1.1.1	192.168.2.9	0x65f9	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465930939 CEST	1.1.1.1	192.168.2.9	0x65f9	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465934992 CEST	1.1.1.1	192.168.2.9	0x2d49	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465934992 CEST	1.1.1.1	192.168.2.9	0x2d49	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.465939999 CEST	1.1.1.1	192.168.2.9	0x517b	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
May 21, 2024 11:21:53.697462082 CEST	1.1.1.1	192.168.2.9	0x4c52	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.698101997 CEST	1.1.1.1	192.168.2.9	0x2023	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.699152946 CEST	1.1.1.1	192.168.2.9	0x4327	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:53.968337059 CEST	1.1.1.1	192.168.2.9	0x22fc	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.968337059 CEST	1.1.1.1	192.168.2.9	0x22fc	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:53.968337059 CEST	1.1.1.1	192.168.2.9	0x22fc	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.304795027 CEST	1.1.1.1	192.168.2.9	0xd629	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.304795027 CEST	1.1.1.1	192.168.2.9	0xd629	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.304805040 CEST	1.1.1.1	192.168.2.9	0xe5f8	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.304805040 CEST	1.1.1.1	192.168.2.9	0xe5f8	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.304805040 CEST	1.1.1.1	192.168.2.9	0xe5f8	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.558814049 CEST	1.1.1.1	192.168.2.9	0xabb1	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.558814049 CEST	1.1.1.1	192.168.2.9	0xabb1	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.558814049 CEST	1.1.1.1	192.168.2.9	0xabb1	No error (0)	spug-lhrc.pubmnet.com		185.64.190.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.576437950 CEST	1.1.1.1	192.168.2.9	0x6cb5	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.576437950 CEST	1.1.1.1	192.168.2.9	0x6cb5	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.687094927 CEST	1.1.1.1	192.168.2.9	0xb6b2	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.693017006 CEST	1.1.1.1	192.168.2.9	0x75f6	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:55.693017006 CEST	1.1.1.1	192.168.2.9	0x75f6	No error (0)	rtb.adgrx.com		54.217.19.5	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.95.171.142	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.95.172.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.94.161.158	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.95.171.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.94.240.143	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.94.242.204	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.95.171.139	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.94.161.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.95.171.140	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.94.242.206	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.775662899 CEST	1.1.1.1	192.168.2.9	0x4ddd	No error (0)	green.erne.co		141.94.242.226	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.878983974 CEST	1.1.1.1	192.168.2.9	0x60ec	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:55.878983974 CEST	1.1.1.1	192.168.2.9	0x60ec	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.229202986 CEST	1.1.1.1	192.168.2.9	0x7de4	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:56.229202986 CEST	1.1.1.1	192.168.2.9	0x7de4	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.229202986 CEST	1.1.1.1	192.168.2.9	0x7de4	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.229208946 CEST	1.1.1.1	192.168.2.9	0x30c6	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.234025002 CEST	1.1.1.1	192.168.2.9	0x1ce2	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.529414892 CEST	1.1.1.1	192.168.2.9	0x14e6	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.774723053 CEST	1.1.1.1	192.168.2.9	0x393b	No error (0)	pixel-eu.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.796690941 CEST	1.1.1.1	192.168.2.9	0xd1bf	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:56.796705008 CEST	1.1.1.1	192.168.2.9	0x4a89	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:56.796705008 CEST	1.1.1.1	192.168.2.9	0x4a89	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.796705008 CEST	1.1.1.1	192.168.2.9	0x4a89	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.836524010 CEST	1.1.1.1	192.168.2.9	0x2487	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 21, 2024 11:21:56.836538076 CEST	1.1.1.1	192.168.2.9	0x1e74	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.836538076 CEST	1.1.1.1	192.168.2.9	0x1e74	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.836538076 CEST	1.1.1.1	192.168.2.9	0x1e74	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:56.860270977 CEST	1.1.1.1	192.168.2.9	0xf9ff	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:56.860280991 CEST	1.1.1.1	192.168.2.9	0xf06b	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.491774082 CEST	1.1.1.1	192.168.2.9	0x1bfd	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.491774082 CEST	1.1.1.1	192.168.2.9	0x1bfd	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.31.50.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.491774082 CEST	1.1.1.1	192.168.2.9	0x1bfd	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.49.44.23	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.491774082 CEST	1.1.1.1	192.168.2.9	0x1bfd	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.17.1.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.491774082 CEST	1.1.1.1	192.168.2.9	0x1bfd	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.48.182.227	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.496742964 CEST	1.1.1.1	192.168.2.9	0x4426	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496750116 CEST	1.1.1.1	192.168.2.9	0x8cfe	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496750116 CEST	1.1.1.1	192.168.2.9	0x8cfe	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496759892 CEST	1.1.1.1	192.168.2.9	0xedd8	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496759892 CEST	1.1.1.1	192.168.2.9	0xedd8	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496759892 CEST	1.1.1.1	192.168.2.9	0xedd8	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.496764898 CEST	1.1.1.1	192.168.2.9	0xe9bd	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496764898 CEST	1.1.1.1	192.168.2.9	0xe9bd	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496764898 CEST	1.1.1.1	192.168.2.9	0xe9bd	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.496773958 CEST	1.1.1.1	192.168.2.9	0x3c55	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.496773958 CEST	1.1.1.1	192.168.2.9	0x3c55	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.603075027 CEST	1.1.1.1	192.168.2.9	0x4f7b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.603075027 CEST	1.1.1.1	192.168.2.9	0x4f7b	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.603075027 CEST	1.1.1.1	192.168.2.9	0x4f7b	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.603080988 CEST	1.1.1.1	192.168.2.9	0x9bf5	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.603080988 CEST	1.1.1.1	192.168.2.9	0x9bf5	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:57.705194950 CEST	1.1.1.1	192.168.2.9	0x1580	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:57.769450903 CEST	1.1.1.1	192.168.2.9	0x44d2	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.103878021 CEST	1.1.1.1	192.168.2.9	0xf300	No error (0)	router.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.103878021 CEST	1.1.1.1	192.168.2.9	0xf300	No error (0)	router.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.111902952 CEST	1.1.1.1	192.168.2.9	0xfca7	No error (0)	router.infolinks.com			65	IN (0x0001)	false
May 21, 2024 11:21:58.245081902 CEST	1.1.1.1	192.168.2.9	0x4959	No error (0)	router.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.245081902 CEST	1.1.1.1	192.168.2.9	0x4959	No error (0)	router.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:58.245094061 CEST	1.1.1.1	192.168.2.9	0x4e45	No error (0)	router.infolinks.com			65	IN (0x0001)	false
May 21, 2024 11:21:58.876610041 CEST	1.1.1.1	192.168.2.9	0x14b2	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:58.876669884 CEST	1.1.1.1	192.168.2.9	0x1cb5	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:21:59.368733883 CEST	1.1.1.1	192.168.2.9	0xee0d	No error (0)	rt3007.infolinks.com			65	IN (0x0001)	false
May 21, 2024 11:21:59.405805111 CEST	1.1.1.1	192.168.2.9	0xbb17	No error (0)	rt3007.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:21:59.405805111 CEST	1.1.1.1	192.168.2.9	0xbb17	No error (0)	rt3007.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.633012056 CEST	1.1.1.1	192.168.2.9	0xa59	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:00.633039951 CEST	1.1.1.1	192.168.2.9	0x1b3	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:00.633074999 CEST	1.1.1.1	192.168.2.9	0x18be	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:00.642621994 CEST	1.1.1.1	192.168.2.9	0xc937	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:00.714504004 CEST	1.1.1.1	192.168.2.9	0xc601	No error (0)	resources.infolinks.com			65	IN (0x0001)	false
May 21, 2024 11:22:00.777805090 CEST	1.1.1.1	192.168.2.9	0x6a57	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.913439035 CEST	1.1.1.1	192.168.2.9	0xef0b	No error (0)	pxl.iqm.com		34.193.171.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.913439035 CEST	1.1.1.1	192.168.2.9	0xef0b	No error (0)	pxl.iqm.com		54.88.142.103	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.913439035 CEST	1.1.1.1	192.168.2.9	0xef0b	No error (0)	pxl.iqm.com		3.229.202.201	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:00.968553066 CEST	1.1.1.1	192.168.2.9	0x55bb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:00.968553066 CEST	1.1.1.1	192.168.2.9	0x55bb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.120820045 CEST	1.1.1.1	192.168.2.9	0xc3ef	No error (0)	resources.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.120820045 CEST	1.1.1.1	192.168.2.9	0xc3ef	No error (0)	resources.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.138991117 CEST	1.1.1.1	192.168.2.9	0x3cb	No error (0)	rt3007.infolinks.com			65	IN (0x0001)	false
May 21, 2024 11:22:01.139966011 CEST	1.1.1.1	192.168.2.9	0xd4ce	No error (0)	rt3007.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.139966011 CEST	1.1.1.1	192.168.2.9	0xd4ce	No error (0)	rt3007.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.248956919 CEST	1.1.1.1	192.168.2.9	0x36ac	No error (0)	d-code.liadm.com	d26da0dx1ebj70.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:01.248967886 CEST	1.1.1.1	192.168.2.9	0xc273	No error (0)	d-code.liadm.com	d26da0dx1ebj70.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:01.248967886 CEST	1.1.1.1	192.168.2.9	0xc273	No error (0)	d26da0dx1ebj70.cloudfront.net		143.204.98.115	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.248967886 CEST	1.1.1.1	192.168.2.9	0xc273	No error (0)	d26da0dx1ebj70.cloudfront.net		143.204.98.19	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.248967886 CEST	1.1.1.1	192.168.2.9	0xc273	No error (0)	d26da0dx1ebj70.cloudfront.net		143.204.98.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.248967886 CEST	1.1.1.1	192.168.2.9	0xc273	No error (0)	d26da0dx1ebj70.cloudfront.net		143.204.98.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.300668955 CEST	1.1.1.1	192.168.2.9	0xf690	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.300668955 CEST	1.1.1.1	192.168.2.9	0xf690	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:01.376535892 CEST	1.1.1.1	192.168.2.9	0x5911	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.517651081 CEST	1.1.1.1	192.168.2.9	0xcd3f	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:02.517676115 CEST	1.1.1.1	192.168.2.9	0x58d0	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:02.517676115 CEST	1.1.1.1	192.168.2.9	0x58d0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.517676115 CEST	1.1.1.1	192.168.2.9	0x58d0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.517676115 CEST	1.1.1.1	192.168.2.9	0x58d0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.517676115 CEST	1.1.1.1	192.168.2.9	0x58d0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		18.211.112.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		107.23.121.33	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		18.235.49.225	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		54.204.82.154	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		34.203.21.209	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		100.26.24.31	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		44.217.232.107	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884610891 CEST	1.1.1.1	192.168.2.9	0x5661	No error (0)	idaas-ext.cph.liveintent.com		34.236.212.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:02.884625912 CEST	1.1.1.1	192.168.2.9	0x7f6	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.272784948 CEST	1.1.1.1	192.168.2.9	0x59ea	No error (0)	pixel.advertising.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.272784948 CEST	1.1.1.1	192.168.2.9	0x59ea	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.272784948 CEST	1.1.1.1	192.168.2.9	0x59ea	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.272784948 CEST	1.1.1.1	192.168.2.9	0x59ea	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:03.272784948 CEST	1.1.1.1	192.168.2.9	0x59ea	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:03.280989885 CEST	1.1.1.1	192.168.2.9	0xf88c	No error (0)	pixel.advertising.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.280989885 CEST	1.1.1.1	192.168.2.9	0xf88c	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.280989885 CEST	1.1.1.1	192.168.2.9	0xf88c	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.911442041 CEST	1.1.1.1	192.168.2.9	0x342a	No error (0)	context.monu.delivery	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.930684090 CEST	1.1.1.1	192.168.2.9	0x9478	No error (0)	context.monu.delivery	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:03.930684090 CEST	1.1.1.1	192.168.2.9	0x9478	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		18.205.222.128	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:03.930684090 CEST	1.1.1.1	192.168.2.9	0x9478	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		52.202.168.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:03.930684090 CEST	1.1.1.1	192.168.2.9	0x9478	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		54.161.241.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:03.930684090 CEST	1.1.1.1	192.168.2.9	0x9478	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		54.237.133.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		52.203.33.12	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		44.197.96.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		18.210.125.214	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		3.211.31.230	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		18.213.141.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		34.227.198.57	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		44.215.170.75	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.886313915 CEST	1.1.1.1	192.168.2.9	0x4418	No error (0)	idx.cph.liveintent.com		44.215.81.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:04.895972013 CEST	1.1.1.1	192.168.2.9	0xaa80	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:05.223556995 CEST	1.1.1.1	192.168.2.9	0xbfd9	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.234366894 CEST	1.1.1.1	192.168.2.9	0x2d75	No error (0)	cms-xch-chicago.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.238969088 CEST	1.1.1.1	192.168.2.9	0x6547	No error (0)	s.ad.smaato.net		13.32.27.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.238969088 CEST	1.1.1.1	192.168.2.9	0x6547	No error (0)	s.ad.smaato.net		13.32.27.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.238969088 CEST	1.1.1.1	192.168.2.9	0x6547	No error (0)	s.ad.smaato.net		13.32.27.23	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.238969088 CEST	1.1.1.1	192.168.2.9	0x6547	No error (0)	s.ad.smaato.net		13.32.27.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.243951082 CEST	1.1.1.1	192.168.2.9	0x4511	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.605662107 CEST	1.1.1.1	192.168.2.9	0xfc47	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:05.605701923 CEST	1.1.1.1	192.168.2.9	0xaaa4	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:05.610584974 CEST	1.1.1.1	192.168.2.9	0xd37d	No error (0)	sync1.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.610584974 CEST	1.1.1.1	192.168.2.9	0xd37d	No error (0)	sync1.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.610584974 CEST	1.1.1.1	192.168.2.9	0xd37d	No error (0)	sync1.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.610584974 CEST	1.1.1.1	192.168.2.9	0xd37d	No error (0)	sync1.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738857985 CEST	1.1.1.1	192.168.2.9	0x50c7	No error (0)	cs.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738873959 CEST	1.1.1.1	192.168.2.9	0x222	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		100.28.13.136	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		44.219.83.99	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		54.224.154.251	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		3.92.155.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		34.239.234.182	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		34.237.44.144	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		34.232.88.133	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.738895893 CEST	1.1.1.1	192.168.2.9	0xed1d	No error (0)	livepixel-production.bln.liveintent.com		44.215.24.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.743752956 CEST	1.1.1.1	192.168.2.9	0x61e9	No error (0)	cm-x.mgid.com		8.2.110.161	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:05.988804102 CEST	1.1.1.1	192.168.2.9	0x308c	No error (0)	cms-xch.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.033724070 CEST	1.1.1.1	192.168.2.9	0xed10	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.033724070 CEST	1.1.1.1	192.168.2.9	0xed10	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.033724070 CEST	1.1.1.1	192.168.2.9	0xed10	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.033731937 CEST	1.1.1.1	192.168.2.9	0xc9ca	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.033731937 CEST	1.1.1.1	192.168.2.9	0xc9ca	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.033731937 CEST	1.1.1.1	192.168.2.9	0xc9ca	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.033731937 CEST	1.1.1.1	192.168.2.9	0xc9ca	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.207.17.47	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.237.25.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.197.117.43	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.193.116.50	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.23.63.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		18.213.72.149	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.225.155.185	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.041467905 CEST	1.1.1.1	192.168.2.9	0x5fbf	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.145.179.33	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.043423891 CEST	1.1.1.1	192.168.2.9	0x587a	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.148648024 CEST	1.1.1.1	192.168.2.9	0xe25b	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.148648024 CEST	1.1.1.1	192.168.2.9	0xe25b	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.148663998 CEST	1.1.1.1	192.168.2.9	0xa94f	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
May 21, 2024 11:22:06.162933111 CEST	1.1.1.1	192.168.2.9	0xf577	No error (0)	router.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.162933111 CEST	1.1.1.1	192.168.2.9	0xf577	No error (0)	router.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.162949085 CEST	1.1.1.1	192.168.2.9	0xdf88	No error (0)	router.infolinks.com			65	IN (0x0001)	false
May 21, 2024 11:22:06.167840958 CEST	1.1.1.1	192.168.2.9	0x136d	No error (0)	api.intentiq.com		13.32.121.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.167840958 CEST	1.1.1.1	192.168.2.9	0x136d	No error (0)	api.intentiq.com		13.32.121.33	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.167840958 CEST	1.1.1.1	192.168.2.9	0x136d	No error (0)	api.intentiq.com		13.32.121.10	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.167840958 CEST	1.1.1.1	192.168.2.9	0x136d	No error (0)	api.intentiq.com		13.32.121.106	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.167862892 CEST	1.1.1.1	192.168.2.9	0xda91	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.167862892 CEST	1.1.1.1	192.168.2.9	0xda91	No error (0)	openrtb-dc11.axonix.com		155.204.117.1	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.167862892 CEST	1.1.1.1	192.168.2.9	0xda91	No error (0)	openrtb-dc11.axonix.com		155.204.117.11	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.167862892 CEST	1.1.1.1	192.168.2.9	0xda91	No error (0)	openrtb-dc11.axonix.com		155.204.117.12	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.173775911 CEST	1.1.1.1	192.168.2.9	0x342a	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.832840919 CEST	1.1.1.1	192.168.2.9	0x9479	No error (0)	rtb.adentifi.com		23.23.73.21	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.832840919 CEST	1.1.1.1	192.168.2.9	0x9479	No error (0)	rtb.adentifi.com		107.20.51.128	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.832840919 CEST	1.1.1.1	192.168.2.9	0x9479	No error (0)	rtb.adentifi.com		3.232.23.139	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.832840919 CEST	1.1.1.1	192.168.2.9	0x9479	No error (0)	rtb.adentifi.com		44.213.202.250	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.832840919 CEST	1.1.1.1	192.168.2.9	0x9479	No error (0)	rtb.adentifi.com		54.211.191.207	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.832840919 CEST	1.1.1.1	192.168.2.9	0x9479	No error (0)	rtb.adentifi.com		54.83.114.132	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.834276915 CEST	1.1.1.1	192.168.2.9	0x37e	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.834292889 CEST	1.1.1.1	192.168.2.9	0x93ee	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:06.834292889 CEST	1.1.1.1	192.168.2.9	0x93ee	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.849216938 CEST	1.1.1.1	192.168.2.9	0xa959	No error (0)	cs.emxdgt.com		3.121.52.194	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.849216938 CEST	1.1.1.1	192.168.2.9	0xa959	No error (0)	cs.emxdgt.com		18.197.201.29	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.849216938 CEST	1.1.1.1	192.168.2.9	0xa959	No error (0)	cs.emxdgt.com		3.73.220.73	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.849216938 CEST	1.1.1.1	192.168.2.9	0xa959	No error (0)	cs.emxdgt.com		3.126.101.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.849216938 CEST	1.1.1.1	192.168.2.9	0xa959	No error (0)	cs.emxdgt.com		3.123.90.196	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.849216938 CEST	1.1.1.1	192.168.2.9	0xa959	No error (0)	cs.emxdgt.com		52.29.164.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864686966 CEST	1.1.1.1	192.168.2.9	0x20d2	No error (0)	live.rezync.com		13.32.27.113	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864686966 CEST	1.1.1.1	192.168.2.9	0x20d2	No error (0)	live.rezync.com		13.32.27.99	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864686966 CEST	1.1.1.1	192.168.2.9	0x20d2	No error (0)	live.rezync.com		13.32.27.83	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864686966 CEST	1.1.1.1	192.168.2.9	0x20d2	No error (0)	live.rezync.com		13.32.27.28	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864691019 CEST	1.1.1.1	192.168.2.9	0x90b7	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864691019 CEST	1.1.1.1	192.168.2.9	0x90b7	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864691019 CEST	1.1.1.1	192.168.2.9	0x90b7	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:06.864691019 CEST	1.1.1.1	192.168.2.9	0x90b7	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.033478022 CEST	1.1.1.1	192.168.2.9	0xc08e	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:08.033478022 CEST	1.1.1.1	192.168.2.9	0xc08e	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.033478022 CEST	1.1.1.1	192.168.2.9	0xc08e	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.033478022 CEST	1.1.1.1	192.168.2.9	0xc08e	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.033482075 CEST	1.1.1.1	192.168.2.9	0x11cc	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:08.324378014 CEST	1.1.1.1	192.168.2.9	0x51d7	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.324378014 CEST	1.1.1.1	192.168.2.9	0x51d7	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:08.329251051 CEST	1.1.1.1	192.168.2.9	0xdc2b	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
May 21, 2024 11:22:08.384430885 CEST	1.1.1.1	192.168.2.9	0xbcd7	No error (0)	cms-xch-chicago.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		44.205.154.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		100.28.13.136	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		44.220.110.186	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		44.215.24.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		34.232.88.133	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		18.215.67.151	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		52.73.2.199	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.564455032 CEST	1.1.1.1	192.168.2.9	0x2c22	No error (0)	livepixel-production.bln.liveintent.com		44.219.83.99	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565494061 CEST	1.1.1.1	192.168.2.9	0xe736	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		3.92.155.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		34.225.137.109	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		44.220.110.186	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		34.239.234.182	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		54.224.154.251	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		50.17.176.238	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		18.215.67.151	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.565510035 CEST	1.1.1.1	192.168.2.9	0x23ad	No error (0)	livepixel-production.bln.liveintent.com		44.215.24.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.566972017 CEST	1.1.1.1	192.168.2.9	0x9b2f	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		34.232.88.133	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		44.219.83.99	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		44.215.24.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		34.225.137.109	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		3.92.155.74	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		50.17.176.238	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		34.237.44.144	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:09.567017078 CEST	1.1.1.1	192.168.2.9	0xe57	No error (0)	livepixel-production.bln.liveintent.com		52.73.2.199	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:10.110430002 CEST	1.1.1.1	192.168.2.9	0xf3b3	No error (0)	pagead-googlehosted.l.google.com		172.217.16.193	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:12.979233027 CEST	1.1.1.1	192.168.2.9	0xc5a7	No error (0)	prod.tahoe-analytics.publishers.advertising.a2z.com		54.218.45.230	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:12.979233027 CEST	1.1.1.1	192.168.2.9	0xc5a7	No error (0)	prod.tahoe-analytics.publishers.advertising.a2z.com		34.216.46.127	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:12.979233027 CEST	1.1.1.1	192.168.2.9	0xc5a7	No error (0)	prod.tahoe-analytics.publishers.advertising.a2z.com		52.38.94.2	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.623928070 CEST	1.1.1.1	192.168.2.9	0x4033	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.663244963 CEST	1.1.1.1	192.168.2.9	0xe0e7	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		54.77.79.252	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		99.80.73.249	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		108.129.15.138	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		52.215.214.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		54.77.248.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753144026 CEST	1.1.1.1	192.168.2.9	0x41fa	No error (0)	rtb.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753153086 CEST	1.1.1.1	192.168.2.9	0x8728	No error (0)	synchrobox.adswizz.com	synchrobox.ec2eu.adswizz.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.753153086 CEST	1.1.1.1	192.168.2.9	0x8728	No error (0)	synchrobox.ec2eu.adswizz.com	as-ms-pro-loadbala-sugvjp2xlhjz-1716713284.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.753153086 CEST	1.1.1.1	192.168.2.9	0x8728	No error (0)	as-ms-pro-loadbala-sugvjp2xlhjz-1716713284.eu-west-1.elb.amazonaws.com		46.51.168.169	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753153086 CEST	1.1.1.1	192.168.2.9	0x8728	No error (0)	as-ms-pro-loadbala-sugvjp2xlhjz-1716713284.eu-west-1.elb.amazonaws.com		52.215.72.38	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.753159046 CEST	1.1.1.1	192.168.2.9	0x4f55	No error (0)	synchrobox.adswizz.com	synchrobox.ec2eu.adswizz.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.753159046 CEST	1.1.1.1	192.168.2.9	0x4f55	No error (0)	synchrobox.ec2eu.adswizz.com	as-ms-pro-loadbala-sugvjp2xlhjz-1716713284.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.757782936 CEST	1.1.1.1	192.168.2.9	0x5c85	No error (0)	cs-tam.minutemedia-prebid.com	d18q3505w6wzgu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.757782936 CEST	1.1.1.1	192.168.2.9	0x5c85	No error (0)	d18q3505w6wzgu.cloudfront.net		18.173.205.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.757782936 CEST	1.1.1.1	192.168.2.9	0x5c85	No error (0)	d18q3505w6wzgu.cloudfront.net		18.173.205.25	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.757782936 CEST	1.1.1.1	192.168.2.9	0x5c85	No error (0)	d18q3505w6wzgu.cloudfront.net		18.173.205.99	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.757782936 CEST	1.1.1.1	192.168.2.9	0x5c85	No error (0)	d18q3505w6wzgu.cloudfront.net		18.173.205.32	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.757795095 CEST	1.1.1.1	192.168.2.9	0xe9eb	No error (0)	cs-tam.minutemedia-prebid.com	d18q3505w6wzgu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.873065948 CEST	1.1.1.1	192.168.2.9	0xaab9	No error (0)	cdn.adswizz.com	delivery-cdn-cf.adswizz.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.873065948 CEST	1.1.1.1	192.168.2.9	0xaab9	No error (0)	delivery-cdn-cf.adswizz.com	d2of0gfv69hsgh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.873065948 CEST	1.1.1.1	192.168.2.9	0xaab9	No error (0)	d2of0gfv69hsgh.cloudfront.net		13.32.99.18	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.873065948 CEST	1.1.1.1	192.168.2.9	0xaab9	No error (0)	d2of0gfv69hsgh.cloudfront.net		13.32.99.45	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.873065948 CEST	1.1.1.1	192.168.2.9	0xaab9	No error (0)	d2of0gfv69hsgh.cloudfront.net		13.32.99.55	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.873065948 CEST	1.1.1.1	192.168.2.9	0xaab9	No error (0)	d2of0gfv69hsgh.cloudfront.net		13.32.99.88	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:13.873095989 CEST	1.1.1.1	192.168.2.9	0x7332	No error (0)	cdn.adswizz.com	delivery-cdn-cf.adswizz.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:13.873095989 CEST	1.1.1.1	192.168.2.9	0x7332	No error (0)	delivery-cdn-cf.adswizz.com	d2of0gfv69hsgh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:14.617911100 CEST	1.1.1.1	192.168.2.9	0x8ffb	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:14.617923021 CEST	1.1.1.1	192.168.2.9	0x130f	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:16.102920055 CEST	1.1.1.1	192.168.2.9	0xbca6	No error (0)	protected-by.clarium.io		52.208.36.168	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:16.102920055 CEST	1.1.1.1	192.168.2.9	0xbca6	No error (0)	protected-by.clarium.io		34.250.100.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:16.102920055 CEST	1.1.1.1	192.168.2.9	0xbca6	No error (0)	protected-by.clarium.io		63.35.48.231	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:16.102920055 CEST	1.1.1.1	192.168.2.9	0xbca6	No error (0)	protected-by.clarium.io		52.17.135.187	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:17.432662964 CEST	1.1.1.1	192.168.2.9	0x2e1	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:17.432662964 CEST	1.1.1.1	192.168.2.9	0x2e1	No error (0)	cdn-content.ampproject.org		216.58.206.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:17.444564104 CEST	1.1.1.1	192.168.2.9	0xcc5f	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:17.564940929 CEST	1.1.1.1	192.168.2.9	0xf5fd	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:17.564940929 CEST	1.1.1.1	192.168.2.9	0xf5fd	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:17.564940929 CEST	1.1.1.1	192.168.2.9	0xf5fd	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:17.564946890 CEST	1.1.1.1	192.168.2.9	0x1084	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:17.564946890 CEST	1.1.1.1	192.168.2.9	0x1084	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:18.767029047 CEST	1.1.1.1	192.168.2.9	0x719b	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		34.253.161.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		52.215.230.136	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		79.125.111.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		54.74.233.226	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		52.211.130.211	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		34.255.242.185	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		52.18.168.73	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:18.767096996 CEST	1.1.1.1	192.168.2.9	0xf745	No error (0)	euw-ice.360yield.com		54.171.124.89	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:20.173049927 CEST	1.1.1.1	192.168.2.9	0x68bf	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:20.173063993 CEST	1.1.1.1	192.168.2.9	0xa2ee	No error (0)	www.google.com			65	IN (0x0001)	false
May 21, 2024 11:22:20.600136995 CEST	1.1.1.1	192.168.2.9	0xb47a	No error (0)	trace-eu.mediago.io		35.214.168.80	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:20.712990046 CEST	1.1.1.1	192.168.2.9	0x2fab	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:20.713006020 CEST	1.1.1.1	192.168.2.9	0x86ed	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:21.056684971 CEST	1.1.1.1	192.168.2.9	0xc056	No error (0)	pagead-googlehosted.l.google.com		142.250.185.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.590310097 CEST	1.1.1.1	192.168.2.9	0x8398	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:21.593796015 CEST	1.1.1.1	192.168.2.9	0xab8d	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:21.600558043 CEST	1.1.1.1	192.168.2.9	0xbf3c	No error (0)	warp.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.601562023 CEST	1.1.1.1	192.168.2.9	0x84ca	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:21.764164925 CEST	1.1.1.1	192.168.2.9	0xd702	No error (0)	nym1-ib.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:23.651695967 CEST	1.1.1.1	192.168.2.9	0x27ac	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:23.651695967 CEST	1.1.1.1	192.168.2.9	0x27ac	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:23.651695967 CEST	1.1.1.1	192.168.2.9	0x27ac	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:23.651715994 CEST	1.1.1.1	192.168.2.9	0x8361	No error (0)	ad-delivery.net			65	IN (0x0001)	false
May 21, 2024 11:22:23.658572912 CEST	1.1.1.1	192.168.2.9	0xef15	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 21, 2024 11:22:23.658586979 CEST	1.1.1.1	192.168.2.9	0x8b7a	No error (0)	ad.doubleclick.net		142.250.74.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.821335077 CEST	1.1.1.1	192.168.2.9	0x8cad	No error (0)	pagead-googlehosted.l.google.com		142.250.184.193	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.849396944 CEST	1.1.1.1	192.168.2.9	0x9f48	No error (0)	cdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:24.849396944 CEST	1.1.1.1	192.168.2.9	0x9f48	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.849396944 CEST	1.1.1.1	192.168.2.9	0x9f48	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.849396944 CEST	1.1.1.1	192.168.2.9	0x9f48	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.849396944 CEST	1.1.1.1	192.168.2.9	0x9f48	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:24.855964899 CEST	1.1.1.1	192.168.2.9	0xc0af	No error (0)	static.vidazoo.com	static.vidazoo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:24.855982065 CEST	1.1.1.1	192.168.2.9	0xefe5	No error (0)	static.vidazoo.com	static.vidazoo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:24.867877960 CEST	1.1.1.1	192.168.2.9	0x7921	No error (0)	acdn.adnxs.com	secure-adnxs.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:25.250922918 CEST	1.1.1.1	192.168.2.9	0x6037	No error (0)	use2-assets.a-mo.net	use2-assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:25.250940084 CEST	1.1.1.1	192.168.2.9	0x82c0	No error (0)	use2-assets.a-mo.net	use2-assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:26.228884935 CEST	1.1.1.1	192.168.2.9	0xf63c	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:26.228884935 CEST	1.1.1.1	192.168.2.9	0xf63c	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:26.228900909 CEST	1.1.1.1	192.168.2.9	0x377f	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:26.228900909 CEST	1.1.1.1	192.168.2.9	0x377f	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:26.228900909 CEST	1.1.1.1	192.168.2.9	0x377f	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.458477020 CEST	1.1.1.1	192.168.2.9	0x46a2	No error (0)	prod.tahoe-analytics.publishers.advertising.a2z.com		34.214.59.156	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.458477020 CEST	1.1.1.1	192.168.2.9	0x46a2	No error (0)	prod.tahoe-analytics.publishers.advertising.a2z.com		34.208.31.124	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.458477020 CEST	1.1.1.1	192.168.2.9	0x46a2	No error (0)	prod.tahoe-analytics.publishers.advertising.a2z.com		52.36.94.1	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.467700005 CEST	1.1.1.1	192.168.2.9	0xcbd0	No error (0)	protected-by.clarium.io		52.208.36.168	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.467700005 CEST	1.1.1.1	192.168.2.9	0xcbd0	No error (0)	protected-by.clarium.io		34.250.100.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.467700005 CEST	1.1.1.1	192.168.2.9	0xcbd0	No error (0)	protected-by.clarium.io		52.17.135.187	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.467700005 CEST	1.1.1.1	192.168.2.9	0xcbd0	No error (0)	protected-by.clarium.io		63.35.48.231	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.480592966 CEST	1.1.1.1	192.168.2.9	0x58f4	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.480592966 CEST	1.1.1.1	192.168.2.9	0x58f4	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.480592966 CEST	1.1.1.1	192.168.2.9	0x58f4	No error (0)	hj5ozcalb.puzztake.com		159.223.152.254	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.480592966 CEST	1.1.1.1	192.168.2.9	0x58f4	No error (0)	hj5ozcalb.puzztake.com		159.89.50.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.480619907 CEST	1.1.1.1	192.168.2.9	0x4d8b	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.232	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.480667114 CEST	1.1.1.1	192.168.2.9	0xb0e7	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.480667114 CEST	1.1.1.1	192.168.2.9	0xb0e7	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.485363960 CEST	1.1.1.1	192.168.2.9	0x133	No error (0)	nym1-ib.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.490124941 CEST	1.1.1.1	192.168.2.9	0x439f	No error (0)	hblg.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.490139008 CEST	1.1.1.1	192.168.2.9	0x70c5	No error (0)	lg3.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.494923115 CEST	1.1.1.1	192.168.2.9	0xa78	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 21, 2024 11:22:29.494934082 CEST	1.1.1.1	192.168.2.9	0xbd4f	No error (0)	googleads.g.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.499645948 CEST	1.1.1.1	192.168.2.9	0xc33b	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.499656916 CEST	1.1.1.1	192.168.2.9	0xea7f	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.503902912 CEST	1.1.1.1	192.168.2.9	0x6872	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.503902912 CEST	1.1.1.1	192.168.2.9	0x6872	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.80.58.6	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.503902912 CEST	1.1.1.1	192.168.2.9	0x6872	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.201.225.151	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.503902912 CEST	1.1.1.1	192.168.2.9	0x6872	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.199.175.60	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.503902912 CEST	1.1.1.1	192.168.2.9	0x6872	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		52.72.198.147	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.504348993 CEST	1.1.1.1	192.168.2.9	0x2efc	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.521224022 CEST	1.1.1.1	192.168.2.9	0x2dd9	No error (0)	yummy.consumable.com		99.86.4.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.521224022 CEST	1.1.1.1	192.168.2.9	0x2dd9	No error (0)	yummy.consumable.com		99.86.4.45	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.521224022 CEST	1.1.1.1	192.168.2.9	0x2dd9	No error (0)	yummy.consumable.com		99.86.4.21	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.521224022 CEST	1.1.1.1	192.168.2.9	0x2dd9	No error (0)	yummy.consumable.com		99.86.4.60	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.525336981 CEST	1.1.1.1	192.168.2.9	0xfd43	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.525978088 CEST	1.1.1.1	192.168.2.9	0x40c6	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		52.86.37.184	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		54.161.23.57	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		54.157.60.254	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		52.72.151.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		52.72.76.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		54.157.238.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		52.72.126.131	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:29.679709911 CEST	1.1.1.1	192.168.2.9	0x28a	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.758738995 CEST	1.1.1.1	192.168.2.9	0x2f95	No error (0)	prebid.cootlogix.com	a0csk8ze4b.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.758738995 CEST	1.1.1.1	192.168.2.9	0x2f95	No error (0)	a0csk8ze4b.puzztake.com	hpq1jzhlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.758749962 CEST	1.1.1.1	192.168.2.9	0x8ada	No error (0)	prebid.cootlogix.com	a0csk8ze4b.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.758749962 CEST	1.1.1.1	192.168.2.9	0x8ada	No error (0)	a0csk8ze4b.puzztake.com	hpq1jzhlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.758749962 CEST	1.1.1.1	192.168.2.9	0x8ada	No error (0)	hpq1jzhlb.puzztake.com		143.198.160.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.758749962 CEST	1.1.1.1	192.168.2.9	0x8ada	No error (0)	hpq1jzhlb.puzztake.com		134.209.124.232	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.777566910 CEST	1.1.1.1	192.168.2.9	0x8fb2	No error (0)	bisrtb.cootlogix.com		45.76.14.250	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.777566910 CEST	1.1.1.1	192.168.2.9	0x8fb2	No error (0)	bisrtb.cootlogix.com		140.82.63.115	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805102110 CEST	1.1.1.1	192.168.2.9	0x5204	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.805102110 CEST	1.1.1.1	192.168.2.9	0x5204	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.805102110 CEST	1.1.1.1	192.168.2.9	0x5204	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.17.231.60	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.252.196.148	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.250.99.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		18.203.107.29	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		99.80.1.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.50.13.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.170.121.32	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805120945 CEST	1.1.1.1	192.168.2.9	0xb391	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		18.200.48.33	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805131912 CEST	1.1.1.1	192.168.2.9	0x698e	No error (0)	pl.vidazoo.com	h1r2njblb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.805131912 CEST	1.1.1.1	192.168.2.9	0x698e	No error (0)	h1r2njblb.puzztake.com		198.211.112.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.805131912 CEST	1.1.1.1	192.168.2.9	0x698e	No error (0)	h1r2njblb.puzztake.com		192.241.136.181	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.806848049 CEST	1.1.1.1	192.168.2.9	0x60c6	No error (0)	pl.vidazoo.com	h1r2njblb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.806890011 CEST	1.1.1.1	192.168.2.9	0x244f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.46.53	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.806890011 CEST	1.1.1.1	192.168.2.9	0x244f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.46.103	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.806890011 CEST	1.1.1.1	192.168.2.9	0x244f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.46.60	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.806890011 CEST	1.1.1.1	192.168.2.9	0x244f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.46.50	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.853226900 CEST	1.1.1.1	192.168.2.9	0x83b1	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.853226900 CEST	1.1.1.1	192.168.2.9	0x83b1	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.860222101 CEST	1.1.1.1	192.168.2.9	0x4f2e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.860222101 CEST	1.1.1.1	192.168.2.9	0x4f2e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.860505104 CEST	1.1.1.1	192.168.2.9	0x3c2d	No error (0)	lbs-event.gcp.lineate-33x.net		34.117.239.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.867732048 CEST	1.1.1.1	192.168.2.9	0x445b	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.877235889 CEST	1.1.1.1	192.168.2.9	0xb7fb	No error (0)	www.google.com			65	IN (0x0001)	false
May 21, 2024 11:22:31.903449059 CEST	1.1.1.1	192.168.2.9	0x90eb	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:31.903449059 CEST	1.1.1.1	192.168.2.9	0x90eb	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.151	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.903449059 CEST	1.1.1.1	192.168.2.9	0x90eb	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:31.905246973 CEST	1.1.1.1	192.168.2.9	0xcfa	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:32.402929068 CEST	1.1.1.1	192.168.2.9	0xeffe	No error (0)	www.idrive.com		148.66.234.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.453834057 CEST	1.1.1.1	192.168.2.9	0x4b5f	No error (0)	static.vidazoo.com	static.vidazoo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:32.453886032 CEST	1.1.1.1	192.168.2.9	0x6b68	No error (0)	static.vidazoo.com	static.vidazoo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:32.820940971 CEST	1.1.1.1	192.168.2.9	0x4d21	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:32.820940971 CEST	1.1.1.1	192.168.2.9	0x4d21	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.820940971 CEST	1.1.1.1	192.168.2.9	0x4d21	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.820940971 CEST	1.1.1.1	192.168.2.9	0x4d21	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.61	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.820940971 CEST	1.1.1.1	192.168.2.9	0x4d21	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.820976973 CEST	1.1.1.1	192.168.2.9	0x1071	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:32.911990881 CEST	1.1.1.1	192.168.2.9	0xfa9f	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:33.556960106 CEST	1.1.1.1	192.168.2.9	0x6704	No error (0)	pagead-googlehosted.l.google.com		142.250.186.129	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:33.674782038 CEST	1.1.1.1	192.168.2.9	0x5725	No error (0)	bis2.vidazoo.com	bisdr.vidazoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:33.674782038 CEST	1.1.1.1	192.168.2.9	0x5725	No error (0)	bisdr.vidazoo.com	hbep1cxlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:33.674799919 CEST	1.1.1.1	192.168.2.9	0xb2f6	No error (0)	bis2.vidazoo.com	bisdr.vidazoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:33.674799919 CEST	1.1.1.1	192.168.2.9	0xb2f6	No error (0)	bisdr.vidazoo.com	hy7044olb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:33.674799919 CEST	1.1.1.1	192.168.2.9	0xb2f6	No error (0)	hy7044olb.puzztake.com		108.61.144.231	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:33.674799919 CEST	1.1.1.1	192.168.2.9	0xb2f6	No error (0)	hy7044olb.puzztake.com		45.76.8.207	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.272306919 CEST	1.1.1.1	192.168.2.9	0x1dd0	No error (0)	contextual.media.net		95.101.148.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701960087 CEST	1.1.1.1	192.168.2.9	0xf012	No error (0)	track.kueezssp.com			65	IN (0x0001)	false
May 21, 2024 11:22:34.701972961 CEST	1.1.1.1	192.168.2.9	0xa20e	No error (0)	track.kueezssp.com		172.67.71.58	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701972961 CEST	1.1.1.1	192.168.2.9	0xa20e	No error (0)	track.kueezssp.com		104.26.0.77	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701972961 CEST	1.1.1.1	192.168.2.9	0xa20e	No error (0)	track.kueezssp.com		104.26.1.77	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701983929 CEST	1.1.1.1	192.168.2.9	0x5161	No error (0)	gtrack.kueezssp.com		172.67.71.58	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701983929 CEST	1.1.1.1	192.168.2.9	0x5161	No error (0)	gtrack.kueezssp.com		104.26.1.77	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701983929 CEST	1.1.1.1	192.168.2.9	0x5161	No error (0)	gtrack.kueezssp.com		104.26.0.77	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701994896 CEST	1.1.1.1	192.168.2.9	0x63d8	No error (0)	bisrtb.cootlogix.com		140.82.63.115	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.701994896 CEST	1.1.1.1	192.168.2.9	0x63d8	No error (0)	bisrtb.cootlogix.com		45.76.14.250	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.702100039 CEST	1.1.1.1	192.168.2.9	0xe440	No error (0)	gtrack.kueezssp.com			65	IN (0x0001)	false
May 21, 2024 11:22:34.749030113 CEST	1.1.1.1	192.168.2.9	0xef0e	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:34.749030113 CEST	1.1.1.1	192.168.2.9	0xef0e	No error (0)	www3.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:34.749042034 CEST	1.1.1.1	192.168.2.9	0x3ed6	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:35.421876907 CEST	1.1.1.1	192.168.2.9	0x2a60	No error (0)	ssum.casalemedia.com			65	IN (0x0001)	false
May 21, 2024 11:22:35.421885014 CEST	1.1.1.1	192.168.2.9	0x4141	No error (0)	ssum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.421885014 CEST	1.1.1.1	192.168.2.9	0x4141	No error (0)	ssum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.483360052 CEST	1.1.1.1	192.168.2.9	0x74aa	No error (0)	ox-rtb-us-east4.openx.net		34.95.113.183	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.192.68.138	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.193.116.50	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.23.63.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.235.239.70	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.83.184.103	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.231.99.168	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.20.226.171	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.545775890 CEST	1.1.1.1	192.168.2.9	0x2d12	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.175.65.220	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.550056934 CEST	1.1.1.1	192.168.2.9	0x4f48	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:35.565845966 CEST	1.1.1.1	192.168.2.9	0x165a	No error (0)	verify.amxrtb.com	verify.amxrtb.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:35.579046965 CEST	1.1.1.1	192.168.2.9	0x4fff	No error (0)	verify.amxrtb.com	verify.amxrtb.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:35.681452990 CEST	1.1.1.1	192.168.2.9	0x3bef	No error (0)	warp.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.681468964 CEST	1.1.1.1	192.168.2.9	0x9a70	No error (0)	lax1-ib.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.681468964 CEST	1.1.1.1	192.168.2.9	0x9a70	No error (0)	lax1-ib.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.681468964 CEST	1.1.1.1	192.168.2.9	0x9a70	No error (0)	lax1-ib.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.681468964 CEST	1.1.1.1	192.168.2.9	0x9a70	No error (0)	lax1-ib.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.681468964 CEST	1.1.1.1	192.168.2.9	0x9a70	No error (0)	lax1-ib.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.681468964 CEST	1.1.1.1	192.168.2.9	0x9a70	No error (0)	lax1-ib.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.681468964 CEST	1.1.1.1	192.168.2.9	0x9a70	No error (0)	lax1-ib.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.827938080 CEST	1.1.1.1	192.168.2.9	0xed60	No error (0)	contextual.media.net		95.101.148.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:35.936054945 CEST	1.1.1.1	192.168.2.9	0x59cb	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:35.936081886 CEST	1.1.1.1	192.168.2.9	0x491e	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.028028965 CEST	1.1.1.1	192.168.2.9	0xb75d	No error (0)	www.googletagservices.com		142.250.185.226	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.028048038 CEST	1.1.1.1	192.168.2.9	0xdf20	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.105099916 CEST	1.1.1.1	192.168.2.9	0x8d0b	No error (0)	ssl.connextra.com	connextra.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.108083010 CEST	1.1.1.1	192.168.2.9	0x3255	No error (0)	ssl.connextra.com	connextra.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.121440887 CEST	1.1.1.1	192.168.2.9	0x84bf	No error (0)	ams3-ib.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.104.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.126.53.178	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.76.227.135	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.15.105	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		35.158.176.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.69.112.131	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.190871954 CEST	1.1.1.1	192.168.2.9	0x9561	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.67.74.124	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.197729111 CEST	1.1.1.1	192.168.2.9	0x8f75	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.400665045 CEST	1.1.1.1	192.168.2.9	0xa056	No error (0)	i0.wp.com		192.0.77.2	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.754127026 CEST	1.1.1.1	192.168.2.9	0x1805	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.754127026 CEST	1.1.1.1	192.168.2.9	0x1805	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.754127026 CEST	1.1.1.1	192.168.2.9	0x1805	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.754142046 CEST	1.1.1.1	192.168.2.9	0xfe5c	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.754153013 CEST	1.1.1.1	192.168.2.9	0x324f	No error (0)	sync.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.754153013 CEST	1.1.1.1	192.168.2.9	0x324f	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.754153013 CEST	1.1.1.1	192.168.2.9	0x324f	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.754153013 CEST	1.1.1.1	192.168.2.9	0x324f	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.754163027 CEST	1.1.1.1	192.168.2.9	0x2bf3	No error (0)	sync.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.756999969 CEST	1.1.1.1	192.168.2.9	0x6529	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.756999969 CEST	1.1.1.1	192.168.2.9	0x6529	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.127	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.756999969 CEST	1.1.1.1	192.168.2.9	0x6529	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.756999969 CEST	1.1.1.1	192.168.2.9	0x6529	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.88	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.756999969 CEST	1.1.1.1	192.168.2.9	0x6529	No error (0)	d1giprow6b9psh.cloudfront.net		13.32.27.11	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.757026911 CEST	1.1.1.1	192.168.2.9	0x637f	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757026911 CEST	1.1.1.1	192.168.2.9	0x637f	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757026911 CEST	1.1.1.1	192.168.2.9	0x637f	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757026911 CEST	1.1.1.1	192.168.2.9	0x637f	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757036924 CEST	1.1.1.1	192.168.2.9	0x8e86	No error (0)	sync.serverbid.com	d1giprow6b9psh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757052898 CEST	1.1.1.1	192.168.2.9	0xf629	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757052898 CEST	1.1.1.1	192.168.2.9	0xf629	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757052898 CEST	1.1.1.1	192.168.2.9	0xf629	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757052898 CEST	1.1.1.1	192.168.2.9	0xf629	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.757052898 CEST	1.1.1.1	192.168.2.9	0xf629	No error (0)	hj5ozcalb.puzztake.com		159.223.124.226	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.757052898 CEST	1.1.1.1	192.168.2.9	0xf629	No error (0)	hj5ozcalb.puzztake.com		159.223.96.127	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.758894920 CEST	1.1.1.1	192.168.2.9	0xaa1	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.758894920 CEST	1.1.1.1	192.168.2.9	0xaa1	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.758894920 CEST	1.1.1.1	192.168.2.9	0xaa1	No error (0)	hj5ozcalb.puzztake.com		159.223.124.226	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.758894920 CEST	1.1.1.1	192.168.2.9	0xaa1	No error (0)	hj5ozcalb.puzztake.com		143.198.162.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:36.758908033 CEST	1.1.1.1	192.168.2.9	0xc0bb	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:36.758908033 CEST	1.1.1.1	192.168.2.9	0xc0bb	No error (0)	ao9ui4chmm.puzztake.com	h7mzk9dlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.148406982 CEST	1.1.1.1	192.168.2.9	0x4436	No error (0)	149837791.v2.pressablecdn.com		192.0.77.39	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.326275110 CEST	1.1.1.1	192.168.2.9	0xa779	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.326316118 CEST	1.1.1.1	192.168.2.9	0x8fbe	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.330852032 CEST	1.1.1.1	192.168.2.9	0xd4cb	No error (0)	s2s.t13.io		34.107.140.113	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.394361019 CEST	1.1.1.1	192.168.2.9	0x2838	No error (0)	lg3.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.448069096 CEST	1.1.1.1	192.168.2.9	0xfaa5	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.448153019 CEST	1.1.1.1	192.168.2.9	0xbdad	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.548861980 CEST	1.1.1.1	192.168.2.9	0xf66a	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.548861980 CEST	1.1.1.1	192.168.2.9	0xf66a	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.548861980 CEST	1.1.1.1	192.168.2.9	0xf66a	No error (0)	nydc1.outbrain.org		64.202.112.191	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.548873901 CEST	1.1.1.1	192.168.2.9	0x8590	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.548873901 CEST	1.1.1.1	192.168.2.9	0x8590	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.910077095 CEST	1.1.1.1	192.168.2.9	0x2046	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.910077095 CEST	1.1.1.1	192.168.2.9	0x2046	No error (0)	cs.digbearings.com		54.195.106.144	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.910077095 CEST	1.1.1.1	192.168.2.9	0x2046	No error (0)	cs.digbearings.com		54.217.173.39	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.910077095 CEST	1.1.1.1	192.168.2.9	0x2046	No error (0)	cs.digbearings.com		99.80.151.237	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:37.910104036 CEST	1.1.1.1	192.168.2.9	0x6cdb	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:37.910114050 CEST	1.1.1.1	192.168.2.9	0x56a4	No error (0)	hblg.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.154256105 CEST	1.1.1.1	192.168.2.9	0x6c33	No error (0)	cdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:38.154256105 CEST	1.1.1.1	192.168.2.9	0x6c33	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.154256105 CEST	1.1.1.1	192.168.2.9	0x6c33	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.154256105 CEST	1.1.1.1	192.168.2.9	0x6c33	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.154256105 CEST	1.1.1.1	192.168.2.9	0x6c33	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		18.194.121.192	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		52.29.6.178	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		3.121.104.202	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		3.124.145.80	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		3.127.77.137	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		52.29.101.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		52.28.164.13	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559226036 CEST	1.1.1.1	192.168.2.9	0xedf9	No error (0)	btlr-eu-central-1.sharethrough.com		52.58.156.106	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.559242010 CEST	1.1.1.1	192.168.2.9	0xbde	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:38.648473024 CEST	1.1.1.1	192.168.2.9	0x15e8	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.648473024 CEST	1.1.1.1	192.168.2.9	0x15e8	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.648473024 CEST	1.1.1.1	192.168.2.9	0x15e8	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:38.883332968 CEST	1.1.1.1	192.168.2.9	0x56d5	No error (0)	dsp.nrich.ai		51.255.68.171	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.082921028 CEST	1.1.1.1	192.168.2.9	0xfe07	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.089353085 CEST	1.1.1.1	192.168.2.9	0x60e5	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.454471111 CEST	1.1.1.1	192.168.2.9	0x5f4b	No error (0)	exchange.mediavine.com		52.29.167.224	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.454471111 CEST	1.1.1.1	192.168.2.9	0x5f4b	No error (0)	exchange.mediavine.com		18.159.162.220	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.454471111 CEST	1.1.1.1	192.168.2.9	0x5f4b	No error (0)	exchange.mediavine.com		3.76.153.167	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.454471111 CEST	1.1.1.1	192.168.2.9	0x5f4b	No error (0)	exchange.mediavine.com		18.159.17.218	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.454471111 CEST	1.1.1.1	192.168.2.9	0x5f4b	No error (0)	exchange.mediavine.com		3.124.53.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.454471111 CEST	1.1.1.1	192.168.2.9	0x5f4b	No error (0)	exchange.mediavine.com		3.121.111.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.575304985 CEST	1.1.1.1	192.168.2.9	0xa009	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:39.575304985 CEST	1.1.1.1	192.168.2.9	0xa009	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.575304985 CEST	1.1.1.1	192.168.2.9	0xa009	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.575304985 CEST	1.1.1.1	192.168.2.9	0xa009	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.575304985 CEST	1.1.1.1	192.168.2.9	0xa009	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.772192955 CEST	1.1.1.1	192.168.2.9	0x7232	No error (0)	pubads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:39.785931110 CEST	1.1.1.1	192.168.2.9	0x9b7e	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
May 21, 2024 11:22:40.072877884 CEST	1.1.1.1	192.168.2.9	0xea1b	No error (0)	cs.yellowblue.io		54.217.173.39	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.072877884 CEST	1.1.1.1	192.168.2.9	0xea1b	No error (0)	cs.yellowblue.io		99.80.151.237	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.072877884 CEST	1.1.1.1	192.168.2.9	0xea1b	No error (0)	cs.yellowblue.io		54.195.106.144	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.294363022 CEST	1.1.1.1	192.168.2.9	0x2250	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.303886890 CEST	1.1.1.1	192.168.2.9	0xb5cb	No error (0)	rtb.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.303886890 CEST	1.1.1.1	192.168.2.9	0xb5cb	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.303886890 CEST	1.1.1.1	192.168.2.9	0xb5cb	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.303886890 CEST	1.1.1.1	192.168.2.9	0xb5cb	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.61	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.303886890 CEST	1.1.1.1	192.168.2.9	0xb5cb	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.308567047 CEST	1.1.1.1	192.168.2.9	0xa210	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
May 21, 2024 11:22:40.308582067 CEST	1.1.1.1	192.168.2.9	0xc965	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.308582067 CEST	1.1.1.1	192.168.2.9	0xc965	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.313338995 CEST	1.1.1.1	192.168.2.9	0x1c43	No error (0)	rtb.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.354518890 CEST	1.1.1.1	192.168.2.9	0x8bd4	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.354518890 CEST	1.1.1.1	192.168.2.9	0x8bd4	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.354518890 CEST	1.1.1.1	192.168.2.9	0x8bd4	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.354518890 CEST	1.1.1.1	192.168.2.9	0x8bd4	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.244.15.236	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.373630047 CEST	1.1.1.1	192.168.2.9	0x8a79	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.373630047 CEST	1.1.1.1	192.168.2.9	0x8a79	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.373630047 CEST	1.1.1.1	192.168.2.9	0x8a79	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.726620913 CEST	1.1.1.1	192.168.2.9	0x229	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.726620913 CEST	1.1.1.1	192.168.2.9	0x229	No error (0)	hb.digbearings.com		54.171.119.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.726620913 CEST	1.1.1.1	192.168.2.9	0x229	No error (0)	hb.digbearings.com		54.195.141.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.726620913 CEST	1.1.1.1	192.168.2.9	0x229	No error (0)	hb.digbearings.com		34.251.30.134	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.726620913 CEST	1.1.1.1	192.168.2.9	0x229	No error (0)	hb.digbearings.com		52.31.183.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.726620913 CEST	1.1.1.1	192.168.2.9	0x229	No error (0)	hb.digbearings.com		52.209.216.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.726620913 CEST	1.1.1.1	192.168.2.9	0x229	No error (0)	hb.digbearings.com		52.210.1.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.726634979 CEST	1.1.1.1	192.168.2.9	0xd2d	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		99.80.73.249	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		54.77.248.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		52.215.214.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		54.77.79.252	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		108.129.15.138	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:40.736777067 CEST	1.1.1.1	192.168.2.9	0x506f	No error (0)	g2.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.025628090 CEST	1.1.1.1	192.168.2.9	0xe012	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.025628090 CEST	1.1.1.1	192.168.2.9	0xe012	No error (0)	hb.digbearings.com		54.195.141.66	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.025628090 CEST	1.1.1.1	192.168.2.9	0xe012	No error (0)	hb.digbearings.com		34.251.30.134	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.025628090 CEST	1.1.1.1	192.168.2.9	0xe012	No error (0)	hb.digbearings.com		52.210.1.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.025628090 CEST	1.1.1.1	192.168.2.9	0xe012	No error (0)	hb.digbearings.com		52.209.216.93	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.025628090 CEST	1.1.1.1	192.168.2.9	0xe012	No error (0)	hb.digbearings.com		52.31.183.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.025628090 CEST	1.1.1.1	192.168.2.9	0xe012	No error (0)	hb.digbearings.com		54.171.119.95	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.048732996 CEST	1.1.1.1	192.168.2.9	0xbdb	No error (0)	context.monu.delivery	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.048732996 CEST	1.1.1.1	192.168.2.9	0xbdb	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		18.205.222.128	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.048732996 CEST	1.1.1.1	192.168.2.9	0xbdb	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		52.202.168.65	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.048732996 CEST	1.1.1.1	192.168.2.9	0xbdb	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		54.161.241.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.048732996 CEST	1.1.1.1	192.168.2.9	0xbdb	No error (0)	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		54.237.133.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.048768044 CEST	1.1.1.1	192.168.2.9	0xf5a2	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.062738895 CEST	1.1.1.1	192.168.2.9	0x85ce	No error (0)	context.monu.delivery	guarded-swordtail-6yls22jfg957kuwmfow0i3tr.herokudns.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.062771082 CEST	1.1.1.1	192.168.2.9	0xa07e	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.062771082 CEST	1.1.1.1	192.168.2.9	0xa07e	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.150	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062771082 CEST	1.1.1.1	192.168.2.9	0xa07e	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.151	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		52.215.214.62	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		54.77.79.252	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		54.77.248.190	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		99.80.73.249	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062828064 CEST	1.1.1.1	192.168.2.9	0xa298	No error (0)	g2.gumgum.com		54.76.86.242	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.062858105 CEST	1.1.1.1	192.168.2.9	0xadeb	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.760859013 CEST	1.1.1.1	192.168.2.9	0xa00	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.760859013 CEST	1.1.1.1	192.168.2.9	0xa00	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.760859013 CEST	1.1.1.1	192.168.2.9	0xa00	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.760859013 CEST	1.1.1.1	192.168.2.9	0xa00	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.760859013 CEST	1.1.1.1	192.168.2.9	0xa00	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.760871887 CEST	1.1.1.1	192.168.2.9	0xadd6	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.876651049 CEST	1.1.1.1	192.168.2.9	0x83fc	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.876662970 CEST	1.1.1.1	192.168.2.9	0x7a7a	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.876662970 CEST	1.1.1.1	192.168.2.9	0x7a7a	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.912753105 CEST	1.1.1.1	192.168.2.9	0xee9a	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.912753105 CEST	1.1.1.1	192.168.2.9	0xee9a	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.912765026 CEST	1.1.1.1	192.168.2.9	0x3aa5	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.912765026 CEST	1.1.1.1	192.168.2.9	0x3aa5	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.919842958 CEST	1.1.1.1	192.168.2.9	0xfc42	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.919842958 CEST	1.1.1.1	192.168.2.9	0xfc42	No error (0)	owv2.pubmnet.com	ow-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.919842958 CEST	1.1.1.1	192.168.2.9	0xfc42	No error (0)	ow-lhrc.pubmnet.com		185.64.190.84	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.919858932 CEST	1.1.1.1	192.168.2.9	0xf5f0	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.919858932 CEST	1.1.1.1	192.168.2.9	0xf5f0	No error (0)	owv2.pubmnet.com	ow-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.982073069 CEST	1.1.1.1	192.168.2.9	0xe6ba	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.982084036 CEST	1.1.1.1	192.168.2.9	0x3141	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.986809015 CEST	1.1.1.1	192.168.2.9	0x883a	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.986819983 CEST	1.1.1.1	192.168.2.9	0x1265	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.200.71	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.132.111	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.234.213	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.165.110	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.87	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.133.0	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.999005079 CEST	1.1.1.1	192.168.2.9	0xc341	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.234	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:41.999006033 CEST	1.1.1.1	192.168.2.9	0x68cc	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.017910004 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
May 21, 2024 11:22:42.019927025 CEST	1.1.1.1	192.168.2.9	0x751b	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.019927025 CEST	1.1.1.1	192.168.2.9	0x751b	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.033806086 CEST	1.1.1.1	192.168.2.9	0xaf75	No error (0)	1x1.a-mo.net		54.88.122.97	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.033806086 CEST	1.1.1.1	192.168.2.9	0xaf75	No error (0)	1x1.a-mo.net		3.233.197.152	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.033806086 CEST	1.1.1.1	192.168.2.9	0xaf75	No error (0)	1x1.a-mo.net		44.193.116.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.033806086 CEST	1.1.1.1	192.168.2.9	0xaf75	No error (0)	1x1.a-mo.net		35.169.192.160	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.033806086 CEST	1.1.1.1	192.168.2.9	0xaf75	No error (0)	1x1.a-mo.net		52.6.243.201	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.033806086 CEST	1.1.1.1	192.168.2.9	0xaf75	No error (0)	1x1.a-mo.net		174.129.36.51	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.091506958 CEST	1.1.1.1	192.168.2.9	0xd51	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.091506958 CEST	1.1.1.1	192.168.2.9	0xd51	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.091506958 CEST	1.1.1.1	192.168.2.9	0xd51	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.091517925 CEST	1.1.1.1	192.168.2.9	0x773	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.133276939 CEST	1.1.1.1	192.168.2.9	0x552d	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.133290052 CEST	1.1.1.1	192.168.2.9	0xc738	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.138010979 CEST	1.1.1.1	192.168.2.9	0xa361	No error (0)	aax-eu.amazon-adsystem.com		54.239.38.253	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.269171000 CEST	1.1.1.1	192.168.2.9	0x7989	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.269171000 CEST	1.1.1.1	192.168.2.9	0x7989	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.269171000 CEST	1.1.1.1	192.168.2.9	0x7989	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.269171000 CEST	1.1.1.1	192.168.2.9	0x7989	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.269171000 CEST	1.1.1.1	192.168.2.9	0x7989	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.269187927 CEST	1.1.1.1	192.168.2.9	0x79a2	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.269187927 CEST	1.1.1.1	192.168.2.9	0x79a2	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.269187927 CEST	1.1.1.1	192.168.2.9	0x79a2	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.358228922 CEST	1.1.1.1	192.168.2.9	0x26c6	No error (0)	mb9eo.publishers.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	mb9eo.publishers.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.232.240.250	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.220.122.203	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.236.18.253	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.88.238.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.227.245.243	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.231.123.13	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.146.9.214	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.358242035 CEST	1.1.1.1	192.168.2.9	0xf7e6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.224.10.143	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.427110910 CEST	1.1.1.1	192.168.2.9	0x9496	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:42.427110910 CEST	1.1.1.1	192.168.2.9	0x9496	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.427110910 CEST	1.1.1.1	192.168.2.9	0x9496	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.81	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.427110910 CEST	1.1.1.1	192.168.2.9	0x9496	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.104	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.427110910 CEST	1.1.1.1	192.168.2.9	0x9496	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.61	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:42.427124023 CEST	1.1.1.1	192.168.2.9	0x2360	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:43.647500992 CEST	1.1.1.1	192.168.2.9	0xb97	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.706711054 CEST	1.1.1.1	192.168.2.9	0xd535	No error (0)	api.rlcdn.com		34.120.133.55	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713114977 CEST	1.1.1.1	192.168.2.9	0x138c	No error (0)	id.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713143110 CEST	1.1.1.1	192.168.2.9	0x24f4	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
May 21, 2024 11:22:43.713150024 CEST	1.1.1.1	192.168.2.9	0x4f44	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.713150024 CEST	1.1.1.1	192.168.2.9	0x4f44	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:43.888843060 CEST	1.1.1.1	192.168.2.9	0xe113	No error (0)	rubicon-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:43.905705929 CEST	1.1.1.1	192.168.2.9	0x7ce7	No error (0)	rubicon-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:44.647151947 CEST	1.1.1.1	192.168.2.9	0xd2a6	No error (0)	prebid-s2s.media.net		34.107.148.139	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.932141066 CEST	1.1.1.1	192.168.2.9	0xc85d	No error (0)	cs.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.977361917 CEST	1.1.1.1	192.168.2.9	0xa8c0	No error (0)	usr.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:44.977361917 CEST	1.1.1.1	192.168.2.9	0xa8c0	No error (0)	d1wsawskf2klzj.cloudfront.net		13.33.187.17	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.977361917 CEST	1.1.1.1	192.168.2.9	0xa8c0	No error (0)	d1wsawskf2klzj.cloudfront.net		13.33.187.118	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.977361917 CEST	1.1.1.1	192.168.2.9	0xa8c0	No error (0)	d1wsawskf2klzj.cloudfront.net		13.33.187.80	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.977361917 CEST	1.1.1.1	192.168.2.9	0xa8c0	No error (0)	d1wsawskf2klzj.cloudfront.net		13.33.187.51	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:44.977374077 CEST	1.1.1.1	192.168.2.9	0xa09a	No error (0)	usr.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.77.16.249	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.255.155.10	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.247.187	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.211.135	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.252.182.88	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.211.255.247	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.228.103.145	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020024061 CEST	1.1.1.1	192.168.2.9	0xa44e	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.155.222.129	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.020035982 CEST	1.1.1.1	192.168.2.9	0xd37e	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020035982 CEST	1.1.1.1	192.168.2.9	0xd37e	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020035982 CEST	1.1.1.1	192.168.2.9	0xd37e	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.020035982 CEST	1.1.1.1	192.168.2.9	0xd37e	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.053637981 CEST	1.1.1.1	192.168.2.9	0xa03c	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.400825977 CEST	1.1.1.1	192.168.2.9	0x3391	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.400844097 CEST	1.1.1.1	192.168.2.9	0x78d	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2024 11:22:45.435237885 CEST	1.1.1.1	192.168.2.9	0x947e	No error (0)	crb.kargo.com		18.193.12.9	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.435237885 CEST	1.1.1.1	192.168.2.9	0x947e	No error (0)	crb.kargo.com		18.198.175.58	A (IP address)	IN (0x0001)	false
May 21, 2024 11:22:45.435237885 CEST	1.1.1.1	192.168.2.9	0x947e	No error (0)	crb.kargo.com		18.158.125.246	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49711	162.241.225.132	80	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2024 11:21:10.859638929 CEST	444	OUT	GET /ch/104c5 HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:11.512980938 CEST	609	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 21 May 2024 09:21:11 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=iso-8859-1 Content-Length: 246 Location: http://jaz.wxk.mybluehost.me/ch/104c5/ Cache-Control: max-age=7200 Expires: Tue, 21 May 2024 11:15:24 GMT X-Server-Cache: true X-Proxy-Cache: HIT host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6a 61 7a 2e 77 78 6b 2e 6d 79 62 6c 75 65 68 6f 73 74 2e 6d 65 2f 63 68 2f 31 30 34 63 35 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://jaz.wxk.mybluehost.me/ch/104c5/">here</a>.</p></body></html>
May 21, 2024 11:21:11.515948057 CEST	445	OUT	GET /ch/104c5/ HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:11.721903086 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:11 GMT Server: nginx/1.21.6 Content-Type: text/html Content-Length: 14645 Last-Modified: Mon, 20 May 2024 19:35:18 GMT Cache-Control: max-age=7200 Expires: Tue, 21 May 2024 09:40:05 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Server-Cache: true X-Proxy-Cache: HIT Accept-Ranges: bytes Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 72 d9 76 dc 46 b2 ed f3 f5 5a fe 87 74 c9 36 c9 36 b3 26 0e 92 4a a4 ba 35 da 74 8b 92 6c 49 76 db 3e be 5c 09 64 00 48 56 22 13 ce 4c d4 40 5b 7f 73 be e1 3c f9 cd 3f 76 03 a8 81 35 24 8a ac 22 a5 ee b3 2e ca 16 81 88 1d 11 3b 76 ec a3 cf 9e be 7a f2 f6 a7 d7 cf 48 e2 52 f9 f0 d3 4f 8e 8a bf 24 94 cc da e3 da b9 25 4a 53 a7 f3 30 21 09 b3 49 98 30 15 03 49 84 75 da 0c 49 68 ad 33 4c d9 48 9b d4 ce 7f ed f1 e9 b7 70 42 2b 4b 6c 2f 26 42 49 a1 a0 78 c3 ff 43 29 b2 8c b9 c4 92 4c b2 10 12 2d 39 18 92 6a fc 57 d5 08 17 e6 b8 26 9d a9 11 89 33 8f 6b 1c 68 98 d4 88 75 43 09 c7 b5 1a 32 25 f8 1c 25 c0 f8 f8 bd fc 4e c1 31 5c c5 65 14 7e cb 45 ef b8 f6 44 2b 07 ca d1 b7 c3 0c 6a 24 1c 7d 1d d7 1c 0c 5c a3 58 f5 01 c1 a5 8c 05 77 fc ee ed 73 7a af 36 db cc 09 27 e1 e1 0b 1d 0b 45 fe 20 6f fa c2 da d7 a8 cb 51 63 94 58 1c 3b 6d 7e f2 ec 18 78 0c bb d8 da e8 14 8e 5b b5 39 4a ff a2 ef 1e d1 27 3a c5 e5 45 20 a1 56 dd 08 c5 0f 59 98 60 27 7c 2b 34 c7 b7 34 b7 8e 1a e8 31 29 38 [TRUNCATED] Data Ascii: rvFZt66&J5tlIv>\dHV"L@[s<?v5$".;vzHRO$%JS0!I0IuIh3LHpB+Kl/&BIxC)L-9jW&3khuC2%%N1\e~ED+j$}\Xwsz6'E oQcX;m~x[9J':E VY`'\|+441)8s0IFk4~mXeyA&}]r'B.$!SMDQ3m&qYJ={&?I4$1@Nu p"KrV;\AHO8qZ#^2%,?JA]]086%K~"PR1Bbv/_J}msy<y<fRrh^MRX$^Yq4cjE!/R)Qtu:6l8-1e+e[P"hJxtq\s4~nvIa`":>)~mJJpVA[T{\KCOl.4)<Ht\D'pF=5RB>ku=f^~=,T
May 21, 2024 11:21:11.723746061 CEST	1236	IN	Data Raw: 36 b4 6e 28 c1 26 00 6e ae c5 67 94 fe 02 8a 8b e8 57 8a cf 6c a6 2c 20 82 e3 06 0a 9c c9 ad a3 65 68 b6 bc 78 ee 4c d3 01 53 0a 0c b5 bc 4b 7e 9f c7 14 0f 4d 2d 75 30 c0 2e e2 02 28 e3 e7 58 d2 21 ad 66 f3 8b 07 1e 30 5e a7 2b 5c 45 c1 3c fe fd Data Ascii: 6n(&ngWl, ehxLSK~M-u0.(X!f0^+\E<\Q}X*~$Lan6i7N+ B;DpU>8-S!9U(\KAQ:T'`r'an}ub;N0FREPL6M\YB9&B^Qa
May 21, 2024 11:21:11.723778009 CEST	1236	IN	Data Raw: 81 d4 61 77 93 fb 26 7b e4 6f fe 9b 26 fb 95 99 c3 aa 4c 90 3b a7 55 55 96 fd c2 99 63 34 63 06 d5 a0 82 ff 3a 07 1c 5b 60 81 d0 24 ba ef 8d 1e fa a2 1e 12 e3 8c 9f c0 ac 7d c6 d3 e7 42 fb cb a1 c3 a5 d0 cc d0 d9 b0 67 a2 cf 8d 11 9a 6f ec 43 a1 Data Ascii: aw&{o&L;UUc4c:[`$}BgoC0gj'B"8,8r6f3f8Olf4Fjq.T!M6(b$(B'n)`s.V~qkaa7J~nN
May 21, 2024 11:21:11.725617886 CEST	1236	IN	Data Raw: 56 2e d1 9e 5b 62 03 0d 77 17 8f 88 01 57 fc 9d f8 34 c3 ee e1 70 14 1d aa 90 2a 17 0d 7d 94 2e 4f 4c 5a e8 a6 4d ce f9 b7 5d 6f b8 d3 61 91 03 53 95 0c 20 d2 06 96 f6 98 eb 36 0e 2d 77 9a 26 a6 5d 3c cb 97 ad 7c f1 cb 7e fe ec 6c d3 a9 76 7f 5b Data Ascii: V.[bwW4p}.OLZM]oaS 6-w&]<\|~lv[k2}eBqQ~Pece5MnE81$x"WTi\Y"-NT%?,YrO%RU\@BE+R"^4SuhcV*w0A+@fXS
May 21, 2024 11:21:11.725637913 CEST	1236	IN	Data Raw: d9 72 41 d5 62 7d c1 5d d2 21 ad bd fa de f4 b9 15 23 b9 c4 00 5c 7f 43 3f 7a e5 8e 9e 92 2b b6 6c b7 6f 65 b5 48 e7 e6 da 9b f9 c1 ab 16 f3 54 5c b1 d7 5e b3 7e 38 79 ee de ca 8a 20 e2 c4 5d 7b c7 0a f4 aa 25 7d 25 57 6c 79 78 70 db 1e 55 42 5d Data Ascii: rAb}]!#\C?z+loeHT\^~8y ]{%}%WlyxpUB]~=WxwVrj+uwJb\|?}5W,zuu}[+m5_<#RfbuHJIr$]]WZq'xbG+{^UbqP8b\|p3VA
May 21, 2024 11:21:11.727421045 CEST	1236	IN	Data Raw: 32 1f b8 a3 15 38 93 5b 47 03 a6 14 56 23 f5 b9 b5 1c 0c 50 9b dd 4b 5c 16 56 63 ae d2 68 04 f4 a9 90 80 88 13 d7 21 7b f7 b2 81 67 b5 8c 71 2e 54 dc 21 87 d9 80 b4 9a 5e 8c 47 aa 0a 4d 4b 9d 3a a4 85 bd 2c 92 e4 e4 0e 6f 15 bf 6a 4d 0d e3 22 b7 Data Ascii: 28[GV#PK\Vch!{gq.T!^GMK:,ojM"&~(".=18AW8a*=i/[HST}xl6=Ip&J\^lmQ\|dC4aC5e&Np@EZ9!:L zppWRlA
May 21, 2024 11:21:11.727440119 CEST	1236	IN	Data Raw: 3d 30 91 d4 fd 0e 49 04 e7 a0 3e 80 b0 2e d9 dd a8 8c af 38 49 a0 9d d3 e9 7a 7a 8a 38 71 9e 8a 0f b1 b1 e9 48 66 1d 0d 13 21 f9 f5 16 69 66 83 0f 42 04 d5 9f e1 b2 d9 21 b0 09 9f 5d a8 7a 9b b1 c6 1f 66 99 22 97 68 eb 36 5a a2 c8 8d e2 96 ba 61 Data Ascii: =0I>.8Izz8qHf!ifB!]zf"h6Za%Z}~'v0pIM!u^)pVrHlhaX=<own&;#w7LlCrpa3@Y:)4^#V8,ZNgB
May 21, 2024 11:21:11.729285002 CEST	1236	IN	Data Raw: 76 4e a7 1d 72 60 56 8d bc 16 8b ba 08 b5 2a f5 39 0b 44 7c b6 d7 ae 1a bf 30 ba 5d 3d 7a 46 92 76 bd 82 e2 02 bd a3 86 75 43 09 0f 17 a2 5c f4 88 e0 c7 35 db 05 f9 a3 61 d9 89 52 60 6a 24 94 cc da 51 94 f6 31 8c f4 8b f8 c3 e5 31 47 29 43 41 67 Data Ascii: vNr`V*9D\|0]=zFvuC\5aR`j$Q11G)CAgEV6- U4tq<%P,\aeRX"Wml1T+9=<QieFYBslKAh}-sk'5DP#8Nji"Pz
May 21, 2024 11:21:11.729305029 CEST	1224	IN	Data Raw: 8b 50 e1 e6 48 6a e6 24 0b 40 92 54 73 5a 24 ad 63 0e 5d 1d b0 b0 5b c0 14 9f c7 9d 9d 31 d9 67 43 4b 2e 0f 78 76 a6 34 cd 74 a6 73 37 13 9d 03 08 15 e9 f9 09 0b e9 e2 be 4b 93 c6 e1 a9 27 52 66 62 a1 b0 2c eb 90 f6 7e 36 78 50 db f4 24 85 44 63 Data Ascii: PHj$@TsZ$c][1gCK.xv4ts7K'Rfb,~6xP$DcAB-MiiHiK-5`4:9_#x(+>+5T+9<@A}89E1\|D(D+9~fEt2BH+NCc-nW;?kHi-
May 21, 2024 11:21:11.729321003 CEST	1236	IN	Data Raw: be d6 19 dd 05 ca 99 4d 98 31 6c d8 21 87 ed fa bd fd e6 dd dd c9 cb 03 32 83 d1 51 64 c1 4d 41 0f 6a 0f 8f 1a 85 a0 1f e2 86 91 36 20 62 a5 83 73 34 2f 31 f0 5b 2e 0c f0 67 03 07 aa b0 2e 5e 36 71 2e eb 34 1a fd 7e bf de df ab 6b 13 37 5a f7 ef Data Ascii: M1l!2QdMAj6 bs4/1[.g.^6q.4~k7Zo6HcbMx\7j7zZ"&eu'5l_6O-{-^SV59}6G.z7SiI I)u,WIf,tB3V!+t`6%7P"?M'!p
May 21, 2024 11:21:11.731065989 CEST	345	IN	Data Raw: 02 17 4c ea b8 d8 77 f1 ed ec 2c 4c 18 ee 49 01 a5 97 24 d5 9c 86 5a e1 b6 8e 52 a3 b5 1b 4b 55 2b e5 c5 4c 24 4c 4a 43 a6 42 d4 a7 64 37 ee b3 b8 ec f2 74 aa 51 49 c9 86 35 e2 58 80 1b c2 e0 b8 46 5b 35 c2 99 63 94 b5 5a c3 71 27 8a 13 51 cc 1a Data Ascii: Lw,LI$ZRKU+L$LJCBd7tQI5XF[5cZq'Q"j}LoQ#F%0`8N8P/M?a-aX\t:~astPip{f<;p,4C$z\blvy=lFOH]'c7}aSBBaQ"LAC:f
May 21, 2024 11:21:11.776087046 CEST	412	OUT	GET /ch/104c5/loader-20200819.png HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://jaz.wxk.mybluehost.me/ch/104c5/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:11.956551075 CEST	460	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:11 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
May 21, 2024 11:21:11.964356899 CEST	369	OUT	GET /ch/104c5/js/swisspass.min-20200819.js.download HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://jaz.wxk.mybluehost.me/ch/104c5/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:12.149276972 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:12 GMT Server: Apache Last-Modified: Mon, 20 May 2024 19:35:18 GMT Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Wed, 22 May 2024 09:21:12 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Transfer-Encoding: chunked Content-Type: application/javascript Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 b2 0b 73 e3 38 d6 25 f8 57 24 b4 46 06 46 10 52 ae 7e 44 7f 64 32 3d 59 ae e7 6e bd a2 9c 35 bd 11 2e 6f 06 44 5e 89 28 43 00 13 00 ed 74 cb fc ef 7b 41 52 12 65 cb d9 55 fd f5 c6 64 a4 45 f2 3e cf 3d e7 ac 6a 93 07 65 cd e8 47 b8 cb 7f 06 6f 6b 97 c3 77 56 16 e0 68 e0 c0 0d 57 dc b3 6d c8 f0 23 c3 cf cc 70 9f f9 c7 c7 6d c3 55 a6 e2 33 0d a5 f2 42 63 4b b6 ea 87 51 b6 cd ad f1 61 64 33 e9 d6 f5 06 4c f0 e9 44 c8 df e4 47 ba ad 9d 4e 02 2f 64 90 c9 44 c0 c7 00 a6 a0 5b d7 6f 4e 80 6b 69 d6 89 c1 f1 8c 07 b5 01 5b 87 c4 8b fe ed f1 f1 2f f0 e7 86 89 c2 1a a0 fb 6d 61 b7 0e b2 09 9d 88 4a 3a 0f ff cf f7 df 61 9c a5 1a c2 c8 60 d8 b2 54 ad e8 d8 08 0d 66 1d ca 5d 47 c8 0c dc 8f de 3a 27 1f 52 10 2b 85 58 88 b0 48 c5 fc 3e df f8 39 16 21 be 40 98 00 99 97 87 8d 48 04 72 22 aa da 97 74 42 0d 13 32 04 47 89 2a 08 63 0d e3 71 61 60 8d 79 d2 15 62 d7 78 f0 09 3b 18 26 0b fd f2 3f 91 19 30 a4 76 d2 bf b6 a8 d5 0e b5 83 50 3b 33 ba b3 aa 18 c5 4e ab 01 99 5f [TRUNCATED] Data Ascii: 1faas8%W$FFR~Dd2=Yn5.oD^(Ct{AReUdE>=jeGokwVhWm#pmU3BcKQad3LDGN/dD[oNki[/maJ:a`Tf]G:'R+XH>9!@Hr"tB2G*cqa`ybx;&?0vP;3N_#chekSB2jGGjYxvEP>3Q8z'uTuAmKr-_Q%hX)F,;FX@YbD@d;C(~6@(-jA'-!fPv=rbqaxp?NhfZw;xxxaoKkZO"^@gKXIUw?u#me]]nk}my%5"5koOSbe"%uE9}o<xx"jWh`pk_?PSkh0WzR \|U@eClixmef3vgU1Z^kW3?N1/L{6qKv7:TxF#&7^pd<q##&]~HQj1Axo~r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49712	162.241.225.132	80	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2024 11:21:11.765333891 CEST	371	OUT	GET /ch/104c5/css/sso.min-20200819.css HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://jaz.wxk.mybluehost.me/ch/104c5/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:11.950165987 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Mon, 20 May 2024 19:35:18 GMT Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Wed, 22 May 2024 09:21:11 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Transfer-Encoding: chunked Content-Type: text/css Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec b2 69 93 dc 38 96 2d f8 57 98 92 a5 a5 a2 cb e9 49 d2 77 d2 b2 9e aa 3b cb 66 9e 59 cf 97 e9 67 36 1f d4 9a 34 90 b8 24 51 01 02 2c 00 1e ee 21 8e ff f7 01 f7 0d f4 08 ad d5 fd ac 14 0a 09 bc f7 dc ed 9c 13 72 fc ec 87 10 73 01 45 c4 99 02 a6 fc 37 6f 82 27 22 49 48 28 51 cf 7e 4a 30 06 16 e4 5c 12 45 38 f3 51 28 39 3d 2b 08 2e 04 ab d4 77 f3 6b 90 02 49 52 55 3d 73 84 31 61 89 ef 04 19 12 09 61 be 5d 46 f9 13 88 98 f2 4b db 2c a2 24 f7 05 44 ea 9d b3 aa 7e 1e 82 90 0b 0c c2 77 6e a1 de 68 7d 81 f0 89 c0 c5 16 9c ab 76 bd ae 89 8c 04 a7 f4 27 92 e5 5c 28 c4 54 70 7b 9f 01 26 c8 d2 09 00 66 21 86 ad 77 19 ba da f5 86 87 fd 21 bf 3e 14 a1 e9 d2 ba c2 be 4a cb 7a 73 7b 4d 9b 3a ca 05 d1 e5 a8 e2 a3 5c 42 20 a2 5e 9c 30 28 b2 db a2 af 9f 5a a7 6c 4d d8 23 51 76 46 98 8d e1 89 44 60 e7 e4 0a d4 16 25 dc 77 1f 56 5f d7 9e 2f 76 76 7e 75 9d af ec 5e b6 16 50 b9 aa cc 9e f6 38 27 df b6 a5 8b f3 57 58 c0 28 50 df c5 76 af ff 54 eb bf 8f 5a de 8f 52 6b bd f9 [TRUNCATED] Data Ascii: 1faai8-WIw;fYg64$Q,!rsE7o'"IH(Q~J0\E8Q(9=+.wkIRU=s1aa]FK,$D~wnh}v'\(Tp{&f!w!>Jzs{M:\B ^0(ZlM#QvFD`%wV_/vv~u^P8'WX(PvTZRk~zm^{7`Y;tU}W>Ye8_`iXg;Wi`XP&zE\|{\T[onz^tr_/3sRr.@D8wxv[vyk'FvF63'F<.$W.?u?I+P6mM]69:i$}?0O+7zQfpszp:y]tzi~-iPmw[G}dl\|nI_`zLO'o{afYuUw[uF.vNxv\|a0pO;zapsz<z$X+OP1m
May 21, 2024 11:21:11.950211048 CEST	224	IN	Data Raw: 37 18 fb 3a ef 2e e9 fa ea fe cb 16 75 ee 58 f4 b5 ed 27 fe 38 ed ef 58 f1 0b 7b ba 2f 3b 6e 49 a4 81 e1 dc d7 1a ee 9f 8a fd 17 51 cc fb 61 8a ad 37 df 51 b3 cd b7 d7 cc 75 8f df 41 b4 f5 e6 1f 2d 1b d5 11 19 a1 1c 3e 6b 89 ae ca fa 06 83 5f 67 Data Ascii: 7:.uX'8X{/;nIQa7QuA->k_g~6`/ei%~yv~l?Z6\|O6A8=~o1(V V&D=E\;KEBUMUM_~F;<z[~
May 21, 2024 11:21:11.950905085 CEST	1236	IN	Data Raw: 35 1b 65 d7 d5 e8 cb 47 91 22 4f 30 09 c6 3c 3a cb 49 2c e5 4f e5 99 a3 d8 13 91 44 01 d6 bb 50 2e fc b7 ee 5f b7 ee fe af 01 3f ab 72 0f df 09 aa 2b 30 44 5c d4 0a 9d 19 06 51 e6 6e af 9c d7 75 3e 6c bc dd fe 5e bf 12 ad 39 28 72 ae 57 2a 73 28 Data Ascii: 5eG"O0<:I,ODP._?r+0D\Qnu>l^9(rW*s(@\B!V aHac"P\1jr.bjR@T<CB9[!9BBmUI+X]E=!;W6&B"k1^aW!BlZAW1
May 21, 2024 11:21:11.950939894 CEST	1236	IN	Data Raw: 8e ca 25 a8 e1 d8 a5 02 0c 11 17 48 11 7d ac e1 9a ca a6 d5 39 da 7f ad b8 6e 7e b5 24 a7 04 5b 92 50 ed fa 20 43 22 21 cc 77 2c 2f ef 85 59 6f 76 90 59 eb bd 57 fd 77 d0 ff de 28 24 c0 b0 c9 23 25 6b 48 00 2a b8 ee 17 53 7e a9 29 e7 b9 4a 04 3f Data Ascii: %H}9n~$[P C"!w,/YovYWw($#%kHS~)J?EYUb/4#N)%#h2GQTZgrA(2EX.Od91\oC=1%JL}nh'"\uhT@GvbhR]}<0QUW=!k
May 21, 2024 11:21:11.950974941 CEST	1236	IN	Data Raw: cb b1 6a 6e 28 20 5c 8c 49 ab 5c 30 a8 3c b6 9f 8d c5 bc a9 c5 d6 db db fb 0c 30 41 d6 bb 4c b7 b9 10 ac 52 ff b0 d7 75 0f 45 3d 60 b0 f3 56 4f bd 35 54 4d 79 3a 6a 9e 22 a2 a0 09 a9 67 0a 3e e3 42 a3 6e 6b 05 57 65 53 88 55 51 bd 10 25 09 f3 cb Data Ascii: jn( \I\0<0ALRuE=`VO5TMy:j"g>BnkWeSUQ%&%]*$#`0[GRyoB ;+E)sA4umb(In \ramy{nEM9a1js23)};#,isGm~vs1bIBvun\\|nvm&S8B
May 21, 2024 11:21:11.951006889 CEST	672	IN	Data Raw: 75 49 47 d0 ec b4 62 30 a5 8e 97 c4 de 0c f8 d3 c9 fb 2c bc eb 39 ce 62 41 d0 93 e9 7a 47 a7 12 b8 c3 d9 31 3d 13 fc 0d 8e 5e 0b 7e 29 86 45 ad c9 7b 44 c4 a9 4d 13 db 5d 75 2f a7 7f 0e a2 5e f7 ec 5f 9b ee b5 ed 5e bb ee b5 ef 5e 87 ee 75 ec 5e Data Ascii: uIGb0,9bAzG1=^~)E{DM]u/^_^^u^vtr u^^u^Y;\|9sgtmu}:tcjF_e;\|9sgtmu}:tc:9D\|)Ai+E7V)G/]M 4fiS<
May 21, 2024 11:21:11.951040030 CEST	1236	IN	Data Raw: 59 25 8e 4d c2 c8 69 85 38 34 08 23 b1 15 62 df 22 a6 bb ef 9a 84 91 e2 0a b1 6d 10 46 9e 2b c4 a6 41 78 d3 cd 3b ca 16 37 6f 99 5b 5c bc e5 cd 19 84 65 5a aa 51 ba 7b 2a 46 99 71 eb cc 82 16 25 c2 a9 11 0b 52 68 c4 a9 06 8c 95 d0 f1 63 1d 5f 10 Data Ascii: Y%Mi84#b"mF+Ax;7o[\eZQ{*Fq%Rhc_B5`A7:lktWnq,AdH$s%Z;%ijFH8j([[w#Q!6/Hpwn3Y2RtCQfvW=
May 21, 2024 11:21:11.951072931 CEST	1236	IN	Data Raw: fd 45 64 6a f2 d5 a9 fc 69 87 a5 fc 09 44 df a0 f9 ec 26 98 d3 c6 b6 bb f2 e7 56 9b 5a c7 3e 44 14 49 f9 2f bf e9 a7 fd b1 c8 b9 24 8a 70 e6 4b 85 14 89 82 98 72 a4 7c c6 19 04 98 c8 9c a2 67 bf 75 16 3d 67 ac 69 a3 f0 a8 cb aa 89 a6 5f da 1b 28 Data Ascii: EdjiD&VZ>DI/$pKr\|gu=gi_(mNZH'OgiF<N3st1<42fi0wkYV?MPWPeXE ]&k24jm5K}40k2za`\>.){?LK;p3Gs
May 21, 2024 11:21:11.951742887 CEST	1236	IN	Data Raw: c2 d9 8c 86 8c d7 d7 7c c0 44 a2 90 02 fe b8 1a c7 05 68 0a 18 7d fe b8 8a 09 50 ac 89 e8 a1 d6 08 5a 44 67 21 75 73 c6 95 8d 28 e5 17 c0 43 e7 37 93 01 60 70 a6 82 ab 42 7a c4 b8 51 0a 24 49 95 8f ce 8a df aa 13 3e a8 e7 1c 7e 93 80 44 94 7e 2c Data Ascii: \|Dh}PZDg!us(C7`pBzQ$I>~D~,Pbn3Y2t/?*F>gff_oy!h7\)NQj-&hZ14iy5h:(P0&,)(6naA1fa04T40bjpz
May 21, 2024 11:21:11.951777935 CEST	1236	IN	Data Raw: 83 f1 11 f5 b5 39 97 44 11 ae fb 03 d5 bb 3f c1 84 ff 63 47 57 85 f7 63 22 a4 b2 a3 94 50 3c 92 6d 04 a2 68 8a 69 d5 1c c2 6c 79 0e cb 4d 91 b6 80 e8 38 ab 97 ac c6 8e b9 78 8d 49 7c d7 cb af 96 2e b6 1c cb 09 62 5d 6f 5f 6a dd 37 8e 13 44 9c 72 Data Ascii: 9D?cGWc"P<mhilyM8xI\|.b]o_j7Drl6RHsSV2BkPR[}~T9mrGj"!b&2)\z/q~]=:u_? <zEL%_'th]X-4#Q2W[8`cWUZ6r
May 21, 2024 11:21:11.956996918 CEST	1236	IN	Data Raw: cd b2 f1 5f b5 e9 c6 3b ec 43 77 b2 a9 77 dc c1 11 5e bf e9 cb 3b 0c 06 eb 40 02 3e e3 6c 32 a0 d5 75 65 8c 9a e6 77 49 13 65 7d 72 ce 5d 9f 6b 48 1c e4 7a 7f 2d 84 4d 9b f4 59 d3 2a 83 ec 7c 97 41 b2 5e 66 c9 e8 0d fe a5 7c bb de 0b 30 ff 95 b0 Data Ascii: _;Cww^;@>l2uewIe}r]kHz-MY*\|A^f\|0zP][Fh!!@1)9@EqMo#hehMzm1Yk,x'o=0tnN53h^]DYsha&} ;eYr\|)%
May 21, 2024 11:21:12.232127905 CEST	419	OUT	GET /fonts/icomoon/icomoon.woff2?7m5yri HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive Origin: http://jaz.wxk.mybluehost.me User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://jaz.wxk.mybluehost.me/ch/104c5/css/sso.min-20200819.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:12.419516087 CEST	460	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:12 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
May 21, 2024 11:21:12.672525883 CEST	417	OUT	GET /fonts/icomoon/icomoon.ttf?7m5yri HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive Origin: http://jaz.wxk.mybluehost.me User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://jaz.wxk.mybluehost.me/ch/104c5/css/sso.min-20200819.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:12.889942884 CEST	509	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:12 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
May 21, 2024 11:21:12.937814951 CEST	418	OUT	GET /fonts/icomoon/icomoon.woff?7m5yri HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive Origin: http://jaz.wxk.mybluehost.me User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://jaz.wxk.mybluehost.me/ch/104c5/css/sso.min-20200819.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:13.126373053 CEST	460	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:13 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49714	162.241.225.132	80	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2024 11:21:11.786082029 CEST	362	OUT	GET /ch/104c5/js/jquery-20200819.js.download HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://jaz.wxk.mybluehost.me/ch/104c5/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:12.375335932 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Mon, 20 May 2024 19:35:18 GMT Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Wed, 22 May 2024 09:21:12 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Transfer-Encoding: chunked Content-Type: application/javascript Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b4 b2 6b 7b e3 c6 d5 25 fa f9 cc af 20 91 1e 74 55 b3 08 91 76 9c 19 83 5d e2 23 ab bb 63 27 ed 6e c7 52 e2 bc 81 e0 3c 85 aa 8d 8b 04 02 10 50 14 25 13 f0 6f 3f bb 70 e1 45 17 3b ef cc 39 b2 9b a8 da b5 2f 6b af b5 4e de 8c 47 d7 7f 5b 43 f9 30 ba 9b 3b f3 2f 9c d9 a8 1e 11 49 87 e0 87 7c 9d 29 a1 93 3c c3 f8 f5 ad 89 39 79 19 9d a4 89 84 ac 82 d1 9b 93 ff 31 0e d7 99 34 19 44 b0 80 6e ad 3c b8 06 a9 2d ce f5 43 01 79 38 5a e5 6a 9d 82 6d bf f0 e0 c0 7d 91 97 ba 5a 1e 5f b9 70 54 2e d7 2b c8 f4 32 c0 ce e3 19 75 f7 83 e8 36 09 c9 78 9f 42 75 5c e6 9b 51 06 9b d1 fb b2 cc 4b 62 f5 f8 4b b8 5d 27 25 54 23 31 da 24 99 c2 9c 4d a2 63 bc 0d 95 16 5d 94 a0 d7 65 36 c2 29 b4 71 db 5f 62 e1 d6 10 26 19 28 6b 3c c0 ed ea 97 dd c7 d5 71 52 b1 e3 cd ef 44 39 92 dc f3 99 3a 00 cf 80 4b a7 32 74 b1 10 4f 32 cf a4 d0 2c c2 63 b1 ae 62 16 e3 01 1b c2 fd e7 90 25 7c db b0 6b 9e 38 3a bf d0 65 92 45 ec 06 2f b1 a8 3e 6f b2 1f ca bc 80 52 3f b0 d4 24 ad b8 d5 89 65 b1 [TRUNCATED] Data Ascii: 1faak{% tUv]#c'nR<P%o?pE;9/kNG[C0;/I\|)<9y14Dn<-Cy8Zjm}Z_pT.+2u6xBu\QKbK]'%T#1$Mc]e6)q_b&(k<qRD9:K2tO2,cb%\|k8:eE/>oR?$e1LdNaD/Uu?_D[~2%_\|z%\|~X^ sQLS{\|Y]1$Zt3VAXYcwt~Va/n8R)1>#Ktrv*&q\|QBysH&+(#hSebo\>;4vvFE\Zn <QcCLE((m#"}Qk4/5[2Tft9pj1'bB;q<3NkziUOuFKJ\|XU=48yfYw$z3%5!"<OAd<EMyt,M&YyAA]gNR}pEI'/Ot(IN1'p4R
May 21, 2024 11:21:12.375353098 CEST	224	IN	Data Raw: 4b 8d 92 6c 04 54 f0 c8 53 3e aa 04 e6 13 8d 39 97 06 9e 6d 9b 8f 99 fa 43 2a 92 ac e3 99 48 33 38 e0 26 7c 56 96 e2 01 03 94 2e 49 80 ff e3 ba 2c e4 c2 b6 f7 8f 82 2e 85 51 d1 dd c5 0f 7b b5 af b8 b2 19 cf 07 ee c9 35 92 8c 4d dd bb 3c 51 a3 59 Data Ascii: KlTS>9mCH38&\|V.I,.Q{5M<QYM`h/}!2P>X\|/t&":%@ND(KAw<cPyyaffayqh8 ZCEmgw<3p)<iL'LQq
May 21, 2024 11:21:12.375361919 CEST	1236	IN	Data Raw: 75 d0 e6 3a 3a bf d0 65 92 45 64 20 77 7c a8 9f 6d 07 d3 42 94 15 7c 48 73 a1 49 40 27 f3 53 3e 33 6d df af 0a fd d0 29 f9 b4 75 eb fb c0 f8 4b d0 be eb 7c 68 df 56 1f f8 e0 99 6a f4 ed 58 d4 b5 95 b7 09 d6 f8 80 83 ba 16 4e 96 2b b8 c4 6b 5d 1b Data Ascii: u::eEd w\|mB\|HsI@'S>3m)uK\|hVjXN+k]#-Jk7iJ=x9,p2,<\>~R#11S'd4X=AjtGbbY@&=G+e]gy w"6mLVxmdA^2)
May 21, 2024 11:21:12.375482082 CEST	1236	IN	Data Raw: 62 1f b9 e5 5d 5d dd 7f 31 bb ba d2 57 57 e5 d5 55 76 75 15 fa 16 fb 9e 5b 64 e9 5e e1 9f 53 63 c2 66 ea d7 de cf 98 38 9b 4d f1 57 cc 7c 3a b1 d8 27 6e 5d 5d 79 d6 e4 e3 c4 7a 43 ac c9 f7 13 8b 62 51 7f f7 de fc fc aa 1e ff ea 2f 39 ed 23 4b f7 Data Ascii: b]]1WWUvu[d^Scf8MW\|:'n]]yzCbQ/9#K57\|_}]_Y,re}_Z]gnWW~kZ?~!W\|oh`~?B "[}SSc/7s;j R/R!{V\|!0'
May 21, 2024 11:21:12.375502110 CEST	1236	IN	Data Raw: 3c 22 a5 69 9a be 79 42 c4 8e 9c bf 31 eb d5 1c 11 06 4c 31 a0 4d b8 ce a4 4e f2 6c 14 09 42 b7 77 a2 1c 09 ee f9 8b 5d 38 20 12 d3 06 94 a2 b3 a6 34 ab d3 53 e5 48 21 63 f8 d8 f2 67 db 0a 11 6b 18 05 9e 70 aa 38 09 35 a1 3e 0b bc 36 d7 e7 30 60 Data Ascii: <"iyB1L1MNlBw]8 4SH!cgkp85>60`#cZ{kgL`xRE{cd$x#Pw*p:M=k^&F@?R\|+2'=}~QS\/n2u}NW8@k)M
May 21, 2024 11:21:12.375600100 CEST	1236	IN	Data Raw: 79 e7 ea 39 ed da ca 96 71 a3 62 3d fe d5 5f be 48 1a 64 22 48 9f 27 6d 78 62 96 ab 92 aa 4f 7b b6 cb 1b e6 de e3 d3 50 c9 9c 37 ae e1 8b 32 22 9d 95 d0 c8 7e 35 e4 f3 7f 39 1a 2a 4d 2a 9e 0f 4f 75 9d 3b 1b 08 6e 12 fd fd 71 ae 79 58 e5 bf 3c 13 Data Ascii: y9qb=_Hd"H'mxbO{P72"~59MOu;nqyX<)GI7yfmyHKfj_~1g[~#>GX\|.<FrGB.k*1)<L$r:;J5\8YtS<123%u
May 21, 2024 11:21:12.375612974 CEST	1236	IN	Data Raw: 89 f9 ad 6b e1 fd b1 fd fd 0a 7f 2d 8b 3e 4e b5 7e e5 56 eb c1 2f 8c 07 db 42 5c 69 62 0e 13 3c b4 ee ed 8c cc fe 48 1b 76 fe ed 77 1f df fd 36 16 9d 7f cc 37 50 9e 8b 0a 08 f6 cf 74 dc 0d c0 a7 a1 d3 97 74 d9 a3 43 cd a0 2c 8d 6b bc 99 6f 80 ff Data Ascii: k->N~V/B\ib<Hvw67PttC,kob>Kis~XpYZR#$5~<a?\GKr0fmv+Xf4u&SJ{.)rH6"E-&4L[afla`6a r6.tA.
May 21, 2024 11:21:12.375766039 CEST	1236	IN	Data Raw: 8c d5 b5 31 14 c5 80 82 fb cf 21 76 3e 9d ce cd dc 54 64 d1 0b 33 ff 81 dd 2a 4d 44 5d 5b 16 7d c9 c0 6d 7d 6b 5f f6 14 e3 b1 13 8f 10 1b ed e4 42 e5 a3 24 44 6b 17 cb c0 69 3b 05 4e 04 fa 4c eb 32 09 d6 1a 88 75 bf 4a 5d f3 60 00 3c 7e eb e2 b4 Data Ascii: 1!v>Td3*MD][}m}k_B$Dki;NL2uJ]`<~G+\|4Nr?rZ7xD>sL/TiQ"n&fKN&H32y0)?z`z&p4TKW;md"HA=;QIX
May 21, 2024 11:21:12.375777960 CEST	1236	IN	Data Raw: 42 b4 87 70 77 00 c1 38 b3 cf 50 b6 3d 56 28 2f f6 52 1c 73 90 15 06 18 83 2e 06 26 66 f2 29 8b 05 d9 11 8d c8 19 7a b2 a3 1a 8d c9 52 b6 32 ab 64 e6 27 e7 d1 b0 4b c1 c3 ba 46 12 83 ba b6 de 58 2c de 59 6c 89 fb b8 31 f3 7c ca 6e f9 58 d4 f5 38 Data Ascii: Bpw8P=V(/Rs.&f)zR2d'KFX,Yl1\|nX8DEbmJ.hG.Kw#F$2Qk%B!<c#HFi-O>R`qf6u-kN9RweB9FC k `TseTEH 9
May 21, 2024 11:21:12.375823021 CEST	1236	IN	Data Raw: f9 d6 11 45 91 3e 10 63 16 06 8b 16 5e d3 f4 f6 22 59 5d c7 e8 a5 9c 52 12 a2 a3 c6 05 9a 6a 8c de fe f7 40 c2 f3 20 18 34 4c 3a 55 5e ea 0b 2d 82 14 f8 ba c5 a3 89 65 d1 36 4c be a1 ce 75 9e 64 26 80 0e 58 63 b6 02 8d a6 7b b7 36 b8 05 76 e7 e3 Data Ascii: E>c^"Y]Rj@ 4L:U^-e6Lud&Xc{6v1:;Q<drxWI9>'J,J%$z+Fq!oO?K9.`X&u}-eM!b]oc#r7\.Df88:o<
May 21, 2024 11:21:12.384639978 CEST	1236	IN	Data Raw: 1f 48 60 6e dd 56 42 6b 2c 62 6d 64 71 20 4c 83 eb 84 5c 39 11 e8 f7 29 18 24 df 3c 7c a7 70 f8 17 3e 65 a1 6d 87 66 0b 8c 7e 42 dc ed ee a1 93 a8 31 e7 6d 42 df e7 6c 47 52 3b aa 93 85 cf 59 0b 63 e6 f3 b0 39 f4 37 f2 ab e1 5e 73 d5 be 3b 15 a4 Data Ascii: H`nVBk,bmdq L\9)$<\|p>emf~B1mBlGR;Yc97^s;`b9*v{zZg(k<M:%FxA2<Qn@e8+K;\Y;E`fgD(GdvLWuQ^$oe303jw0(6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49716	162.241.225.132	80	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2024 11:21:11.796942949 CEST	366	OUT	GET /ch/104c5/js/vendor.min-20200819.js.download HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://jaz.wxk.mybluehost.me/ch/104c5/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:12.392854929 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Mon, 20 May 2024 19:35:18 GMT Accept-Ranges: bytes Cache-Control: max-age=86400 Expires: Wed, 22 May 2024 09:21:12 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Transfer-Encoding: chunked Content-Type: application/javascript Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc b2 7f 7b db b6 96 35 fa bf 3f 85 8c 39 a3 12 15 44 4b 49 fa 8b 2c ab 49 6d 67 ea f7 c4 49 a6 76 4f df 5e c7 27 0f 48 80 24 6a 0a 60 41 d0 b6 2a e9 bb df 0d 90 94 28 5b 4e d2 39 cf cc bd e9 53 8b d8 3f d6 5e 7b ed 75 f4 e5 c1 80 16 73 25 d9 60 e2 3f f7 a7 83 63 55 2e b4 c8 72 33 f0 12 3c 78 36 99 4e c7 f0 e7 05 19 5c e6 7c 70 a2 7e 57 83 57 aa 96 8c 1a a1 e4 e0 65 51 0c 7e b6 c5 d5 e0 67 5e 71 7d cb 99 7f 30 78 79 4b 45 41 e3 82 0f 6e 05 1d 18 e8 3b 3f bb 1c 28 3d 90 fc 6e f0 e3 c5 c9 a0 10 09 97 15 87 d2 8a f3 60 90 1b 53 06 47 47 99 30 79 1d fb 89 9a 1f fd ae e3 5a df f0 a3 96 59 0a bd 8c 1b 40 ad 0e be 3c 3a 18 a5 b5 4c ec 7c 2f c3 cb 5b aa 07 45 b4 89 a4 84 e3 a5 c9 45 e5 9b 45 c9 23 f7 a5 4a 9b aa 9a 07 97 96 19 6b 1e 46 cc b9 aa 4d f3 c8 d5 2d d7 17 86 9a b6 ed 6f bc e0 73 2e 4d 24 eb a2 08 5d 48 48 61 3c 64 94 2a 8c 28 11 b1 c3 d6 61 e1 9f 9c be 7a f9 cb eb cb 8b 68 49 a5 98 3b 69 82 c3 09 29 0b 9a 38 84 00 5a a0 bc 02 c0 c4 28 1d 1c 4e 89 e1 [TRUNCATED] Data Ascii: 1faa{5?9DKI,ImgIvO^'H$j`A([N9S?^{us%`?cU.r3<x6N\\|p~WWeQ~g^q}0xyKEAn;?(=n`SGG0yZY@<:L\|/[EEE#JkFM-os.M$]HHa<d(azhI;i)8Z(NsH\|y )hUmnSsERr\|u{RWa D/"D$`Cs/{iyASje=SnJ$ipn'<&fxS!qX+enK8W;MsDwc+#o!p7hbm]"~N+!P:~qL'~1jp=TJ#PB"+'(-Tf9,3+6K%ShBkr+9g2[p4aZB\|V.3\|<H$J5EQwaq96$;M$_4BeESxQCskZCz-vUm-GJURW6(\|D{xMB"<B?u@H[xC
May 21, 2024 11:21:12.392956972 CEST	224	IN	Data Raw: 1b 8e 32 9f df 1b 2e 99 b7 5c ef e0 93 65 7b d0 a0 d3 8f 1c 74 10 01 42 6b dc b8 3b 15 f7 97 02 ac 04 2e 09 0b 4b c4 28 4b d5 cf b8 39 e1 29 ad 0b 53 45 3d 73 69 6e 6a 2d 07 85 7f 72 fa ea e5 2f af 2f 2f 1e 75 bd 6d 79 6d 9a 52 bc 4c 1f b3 ec e1 Data Ascii: 2.\e{tBk;.K(K9)SE=sinj-r///umymRL{*L.C$ygtxWru/-th7VK# + Mro'J6`xZQ$/-!+Cebpct\|ZC%_mwmY
May 21, 2024 11:21:12.392970085 CEST	1236	IN	Data Raw: c3 b8 51 1c c5 15 b8 f5 60 d3 81 c3 04 dc a8 2f c5 9c ab da 78 dc 37 cd 17 0e b9 9f ab 5b ae 2f 0c a0 44 48 48 14 8a d4 3b e4 1b ab 3a d5 57 ab 87 11 df 5e 08 b7 2b 73 f7 f2 2c 58 8b 1b 55 dc 74 c3 7a 67 b0 f8 51 d4 1f 39 1c 76 cd 70 9b 7d 23 76 Data Ascii: Q`/x7[/DHH;:W^+s,XUtzgQ9vp}#v%nGje1!jZoQx,g&{i%zV4[PC6?\6rVx8t!.i\p66=Y5NxJ.iI5D2OP`3tQ)~O;.hUy(#Z$B ]3IQ
May 21, 2024 11:21:12.392982960 CEST	1236	IN	Data Raw: 50 a4 de 21 f5 45 75 c2 53 5a 17 e6 9d e6 16 86 33 0f 63 cd 4d ad e5 20 d9 d5 04 16 c1 24 f3 ab ba 2c 95 b6 50 54 56 c2 ee 39 1c 36 43 80 91 9f d3 aa 27 21 c2 b3 c4 57 92 7b fb da 7c 2e 19 49 b1 cf e7 75 01 b2 5c 6e 12 a7 70 c5 e9 57 13 1c 80 7e Data Ascii: P!EuSZ3cM $,PTV96C'!W{\|.Iu\npW~Aod].{T;<NK}jll5@,J]&$-m=?'G=6\|{&;hx&az[P]`Tdq!gq;LJ_\dr5c=
May 21, 2024 11:21:12.393049002 CEST	1236	IN	Data Raw: a2 de 8a 4a c4 05 54 87 07 49 73 67 3e 1c 26 05 a7 fa 52 cc b9 aa 8d c7 71 c8 23 b8 41 f7 2e c8 f4 f4 05 0e ff e6 dd 81 36 ea 0e fb e0 98 1d 4c 5f f3 4a fc c9 11 29 f0 7a 63 a4 02 8c d4 6b 49 d3 fd 3d d8 8e f7 1e cc 27 1c 4e eb 96 d0 7c ae 6e f9 Data Ascii: JTIsg>&Rq#A.6L_J)zckI='N\|nGc$d])x/j~Tdx\g+x_xvKUns )bJ*wuje=Y~{i}#h0mChnj-Fj5!BU'u4qs`
May 21, 2024 11:21:12.393063068 CEST	1236	IN	Data Raw: 8b 45 63 0d aa b3 7a 6e ed 85 d7 6b cf b1 77 9d 98 54 89 56 45 f1 ce 79 2f 78 38 3e a4 d1 81 b5 83 2f f8 70 78 e4 55 86 1a 91 ac 34 2f e0 f7 96 e3 23 df f0 ca b8 01 ce 84 a8 54 95 b0 fd 08 e3 d5 ea 88 c6 95 2a 6a c3 3f 56 d6 ec 5e ba f1 d5 47 0c Data Ascii: EcznkwTVEy/x8>/pxU4/#Tj?V^GuSWu$2v[6jZB!</JoMs}J/L><&]?$;GM1"P,^(s5S=k82M2CuGQ<
May 21, 2024 11:21:12.393136024 CEST	1236	IN	Data Raw: f2 08 3a 00 7e f2 3d bd 62 d7 1d c8 24 b4 af 68 1a e6 51 93 68 de 93 b0 b5 43 0e c7 5e 63 ef f7 ff aa b9 5e e0 f0 c0 db d0 cd 48 81 97 dd 6b 70 03 0e 72 d6 f9 90 d4 fa 4c 56 26 92 75 51 84 4d e8 86 2f 4e ad 15 2d 83 26 d2 9a 8a 9d c9 b2 36 55 74 Data Ascii: :~=b$hQhC^c^HkprLV&uQM/N-&6Utu<PYQKp};!-3!kM!m!qAaUDM+4Zd{+h[OT6:uFy_5E9-6\|;B'((<p-gZlI*~MNNJo
May 21, 2024 11:21:12.393217087 CEST	1236	IN	Data Raw: 56 77 55 f0 82 7c b8 13 2c e3 66 9b 0c 7a 0e 6b a9 39 11 59 79 22 6e d7 a4 82 5a 9e d2 ba 30 d5 b6 92 e2 25 77 d2 f9 1f 58 9b 24 07 74 b5 5a ae 37 eb d9 ec 9a 7c a0 c6 d0 24 df 37 cd 09 e8 e4 22 39 49 42 16 51 5f 2a c6 dd d9 8c 7a ad ee 60 1f 5a Data Ascii: VwU\|,fzk9Yy"nZ0%wX$tZ7\|$7"9IBQ_*z`ZqyEQU%;@ESbcP^&de 9}UF"H6nO<iK$8&/d!$voZ55/pCN}x?GA`t+ppvBd:
May 21, 2024 11:21:12.394289970 CEST	776	IN	Data Raw: e3 4a 15 b5 e1 e1 c0 a8 32 18 8c a7 93 49 79 1f 0e ee 04 33 79 30 b0 df 5f 1c 41 0b 47 f8 f1 68 ff 86 2f 98 ba 93 ad 73 99 fa 3b 5f 9c c0 1b 0e ea a1 58 b1 05 da 9c fa 51 2f 26 8f d7 6f 03 92 df d9 d7 e3 1e 72 38 85 b6 cd cd a2 e5 ba 73 ce a3 d2 Data Ascii: J2Iy3y0_AGh/s;_XQ/&or8s(!~Ljaa'&:1JGQt`7k@S1\qX[Zh%/L>K/i/i~d]jy1s.}B$TO\d!uUUQY6EVI? [gQ(
May 21, 2024 11:21:12.394304037 CEST	1236	IN	Data Raw: 2f e2 d5 be a0 5f 70 99 99 fc 3a a2 d6 63 a2 3a 69 b3 4f d8 0c 64 3e a4 b8 99 79 38 0d 53 a5 3d e7 bc 68 12 c6 df 7f 04 3f 8c 47 23 0c cd 7b 79 c5 d7 96 7c 87 3a 09 3b 78 20 94 71 73 26 2b b3 c3 c1 e8 45 b7 f5 7e 9b af 13 6a c0 6f b1 f5 99 56 77 Data Ascii: /_p:c:iOd>y8S=h?G#{y\|:;x qs&+E~joVw\T@pX:^khEPWv$$%DGJ-QB:\n$Qe4<0t[w~ig-R:E^7@Ik0j{l:2G0j4IzP&"y
May 21, 2024 11:21:12.402607918 CEST	1236	IN	Data Raw: 37 f7 3f 9c 80 a4 bb ee dd 51 96 46 9d 7a 70 a1 10 b9 bd 90 93 4d c2 01 df d0 39 f7 8d 7a ad ee b8 3e a6 15 f7 b0 75 7b 94 79 6d 21 28 02 fa 81 f1 df d8 6b 5f 4d ae dd 09 0e 77 69 8a ea 44 54 14 2c c7 76 a8 0e 87 bb 65 f6 4c ce bb 76 7a 7b 72 c2 Data Ascii: 7?QFzpM9z>u{ym!(k_MwiDT,veLvz{rHN7n"M<n9'9`?~_Bfr?)g!<x5/&(AOX!(q\;(zgh97BG\|CSy"h2k5zXTjl
May 21, 2024 11:21:12.818070889 CEST	416	OUT	GET /idp/co-branding?resource=co-branding&lang=de&provider=sbbkn HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest Referer: http://jaz.wxk.mybluehost.me/ch/104c5/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:13.542715073 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:13 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=UTF-8 Content-Length: 1228 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 52 6b 6f db 36 14 fd 1c ff 0a 56 c5 fa 61 18 25 27 6d 87 c1 91 1d 74 dd b0 0d d8 a3 40 36 04 fb 14 50 e2 b5 c5 98 af 91 94 65 65 e8 7f df a5 44 29 4e 1f 03 da 0a 06 2c dd e7 b9 e7 9c f2 c9 0f 7f bc fe f3 ef 37 3f 92 26 28 b9 59 94 f1 8f 48 a6 77 eb 0c 34 fd eb 3a db 2c ce ca 06 18 c7 ff b3 52 41 60 44 33 05 eb ec 20 a0 b3 c6 85 8c d4 46 07 d0 61 9d 75 82 87 66 cd e1 20 6a a0 c3 47 f6 6e 97 33 95 09 fe a4 47 1b a1 39 1c bf 21 da 6c 8d 94 a6 cb 48 31 34 05 11 24 6c 6e 40 d6 46 01 79 a6 38 f3 cd 25 79 6d 94 d0 3b 72 6d 8c 2e 8b b1 24 16 fb da 09 1b 88 77 f5 3a 6b 42 b0 ab a2 b8 63 f7 79 77 dc e7 aa af 64 0b 8d f1 21 57 50 74 96 0a 5d cb 96 83 2f ee f0 f7 4f 0b ae 4f 7f f9 9d cf 36 65 31 ce 1a c7 86 5e 02 09 bd 45 e4 01 8e a1 a8 3d 96 7c 4d fe 5d 10 7c 2a 73 a4 5e dc 23 9e 15 be 3b 0e 8e 62 e8 72 c8 51 65 ee e9 ff 16 74 50 ed 45 f8 68 cd db c5 a2 32 bc 9f 56 b1 7a bf 73 a6 d5 9c d6 46 1a b7 22 5d 23 02 8c a3 52 a4 92 58 34 46 cc 01 dc 16 b9 a4 c7 15 69 04 e7 a0 c7 b8 62 [TRUNCATED] Data Ascii: Rko6Va%'mt@6PeeD)N,7?&(YHw4:,RA`D3 Fauf jGn3G9!lH14$ln@Fy8%ym;rm.$w:kBcywd!WPt]/OO6e1^E=\|M]\|*s^#;brQetPEh2VzsF"]#RX4Fibn',O;lZi#_7pdl%$wbz6 vC3Smga1(C^~5-\|d9~Gu8:mE^\,H,HRLAGII4mbCHUHb;X5L7RG";mZcBnQ=DrO]r#/O4a[<CCmUy81n(bZVU)dRe~0[zPpALN`\&<cvTZOx%gno^fqIra4q-4\AYZHRaebJbc`Cf_F!y~d`EkYPX8z%$Y,uo+_;a;+\|zC\}>.6<M<\#XrJHZW qV62MNHguL$#mfW4C
May 21, 2024 11:21:13.706562042 CEST	408	OUT	GET /ch/104c5/img/favicon.ico HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://jaz.wxk.mybluehost.me/ch/104c5/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:13.913470030 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:13 GMT Server: nginx/1.21.6 Content-Type: image/x-icon Content-Length: 1150 Last-Modified: Mon, 20 May 2024 19:35:18 GMT Cache-Control: max-age=31536000 Expires: Wed, 21 May 2025 00:10:22 GMT host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Server-Cache: true X-Proxy-Cache: HIT Accept-Ranges: bytes Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 36 34 cd ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 36 34 cd ff 22 20 c8 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 22 20 c8 ff 26 25 c9 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 26 25 c9 ff 26 25 c9 ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff 16 14 c5 ff 26 25 c9 ff 26 25 c9 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff [TRUNCATED] Data Ascii: h( 64&%&%&%&%&%&%&%&%&%&%&%&%&%&%64" " &%&%&%&%&%&%%#&%43%#%#%#%#%#&%%#&%&%&%%#&%&%&%%#&%&%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49726	162.241.225.132	80	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2024 11:21:14.509383917 CEST	298	OUT	GET /ch/104c5/img/favicon.ico HTTP/1.1 Host: jaz.wxk.mybluehost.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 21, 2024 11:21:15.159149885 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:15 GMT Server: nginx/1.21.6 Content-Type: image/x-icon Content-Length: 1150 Last-Modified: Mon, 20 May 2024 19:35:18 GMT Cache-Control: max-age=31536000 Expires: Wed, 21 May 2025 00:10:22 GMT host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Server-Cache: true X-Proxy-Cache: HIT Accept-Ranges: bytes Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 36 34 cd ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 26 25 c9 ff 36 34 cd ff 22 20 c8 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 22 20 c8 ff 26 25 c9 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 26 25 c9 ff 26 25 c9 ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff 16 14 c5 ff 26 25 c9 ff 26 25 c9 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff [TRUNCATED] Data Ascii: h( 64&%&%&%&%&%&%&%&%&%&%&%&%&%&%64" " &%&%&%&%&%&%%#&%43%#%#%#%#%#&%%#&%&%&%%#&%&%&%%#&%&%
May 21, 2024 11:21:15.160875082 CEST	294	IN	Data Raw: c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 16 14 c5 ff 26 25 c9 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 16 14 c5 ff ff ff ff ff 25 23 c9 ff ff ff ff ff Data Ascii: &%%#&%" " &%&%&%&%&%&%&%&%&%&%&%64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49715	162.241.225.132	80	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2024 11:21:56.845966101 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49717	193.203.121.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:12 UTC	620	OUT	GET //resources/img/logo_text_de-20200819.svg HTTP/1.1 Host: www.swisspass.ch Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://jaz.wxk.mybluehost.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:12 UTC	893	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:12 GMT Server: Apache Content-Length: 139971 last-modified: Fri, 26 Apr 2024 10:42:00 GMT etag: "662b84f8-222c3" expires: Wed, 21 May 2025 09:21:12 GMT cache-control: max-age=31536000 accept-ranges: bytes cache-control: private X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=16070400 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: same-origin Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self' Set-Cookie: AL_SESS-S=AdHCMCs3gtjn_qh4CBoxlO2ml9pC0kfpnf9Jvy4qBBlAPW073maM74QYeHd2sa7dmy7p; Path=/; Domain=.swisspass.ch; Secure; HttpOnly; SameSite=None Connection: close Content-Type: image/svg+xml
2024-05-21 09:21:12 UTC	13660	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 0a 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg"
2024-05-21 09:21:12 UTC	4194	IN	Data Raw: 20 31 34 35 2e 32 39 2c 31 33 31 2e 36 35 20 31 34 35 2e 32 39 2c 31 33 30 2e 30 33 20 31 34 36 2e 39 2c 31 33 30 2e 30 33 20 31 34 36 2e 39 2c 31 32 38 2e 36 36 20 31 34 35 2e 32 39 2c 31 32 38 2e 36 36 20 31 34 35 2e 32 39 2c 31 32 37 2e 30 35 20 31 34 33 2e 39 31 2c 31 32 37 2e 30 35 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 6f 6c 79 67 6f 6e 34 30 35 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 31 34 33 2e 39 31 2c 31 31 33 2e 37 20 31 34 32 2e 33 2c 31 31 33 2e 37 20 31 34 32 2e 33 2c 31 Data Ascii: 145.29,131.65 145.29,130.03 146.9,130.03 146.9,128.66 145.29,128.66 145.29,127.05 143.91,127.05 " id="polygon4059" style="fill:#ffffff" /> <polygon class="cls-1" points="143.91,113.7 142.3,113.7 142.3,1
2024-05-21 09:21:12 UTC	16384	IN	Data Raw: 31 37 2e 32 36 2c 34 30 2e 31 35 20 32 31 38 2e 38 37 2c 34 30 2e 31 35 20 32 31 38 2e 38 37 2c 34 31 2e 37 36 20 32 32 30 2e 32 35 2c 34 31 2e 37 36 20 32 32 30 2e 32 35 2c 34 30 2e 31 35 20 32 32 31 2e 38 36 2c 34 30 2e 31 35 20 32 32 31 2e 38 36 2c 33 38 2e 37 37 20 32 32 30 2e 32 35 2c 33 38 2e 37 37 20 32 32 30 2e 32 35 2c 33 37 2e 31 36 20 32 31 38 2e 38 37 2c 33 37 2e 31 36 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 6f 6c 79 67 6f 6e 34 30 38 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 Data Ascii: 17.26,40.15 218.87,40.15 218.87,41.76 220.25,41.76 220.25,40.15 221.86,40.15 221.86,38.77 220.25,38.77 220.25,37.16 218.87,37.16 " id="polygon4089" style="fill:#ffffff" /> <polygon class="cls-1" points="
2024-05-21 09:21:12 UTC	7382	IN	Data Raw: 33 38 32 38 32 20 71 20 30 2e 35 30 33 39 2c 2d 31 2e 32 37 37 33 34 34 20 31 2e 36 32 38 39 2c 2d 32 2e 30 30 33 39 30 37 20 31 2e 31 33 36 37 32 2c 2d 30 2e 37 32 36 35 36 32 20 32 2e 36 33 36 37 32 2c 2d 30 2e 37 32 36 35 36 32 20 32 2e 35 38 39 38 35 2c 30 20 33 2e 37 32 36 35 36 2c 31 2e 38 38 36 37 31 39 20 30 2e 36 30 39 33 38 2c 31 2e 30 33 31 32 35 20 30 2e 36 30 39 33 38 2c 33 2e 30 32 33 34 33 37 20 76 20 38 2e 32 31 34 38 34 32 20 68 20 2d 31 2e 35 32 33 34 34 20 76 20 2d 38 2e 30 30 33 39 30 34 20 71 20 30 2c 2d 31 2e 37 36 39 35 33 32 20 2d 30 2e 35 35 30 37 38 2c 2d 32 2e 35 33 31 32 35 20 2d 30 2e 38 35 35 34 37 2c 2d 31 2e 32 30 37 30 33 32 20 2d 32 2e 36 33 36 37 32 2c 2d 31 2e 32 30 37 30 33 32 20 2d 31 2e 31 30 31 35 36 2c 30 20 2d 31 Data Ascii: 38282 q 0.5039,-1.277344 1.6289,-2.003907 1.13672,-0.726562 2.63672,-0.726562 2.58985,0 3.72656,1.886719 0.60938,1.03125 0.60938,3.023437 v 8.214842 h -1.52344 v -8.003904 q 0,-1.769532 -0.55078,-2.53125 -0.85547,-1.207032 -2.63672,-1.207032 -1.10156,0 -1
2024-05-21 09:21:12 UTC	4194	IN	Data Raw: 31 2e 33 31 32 35 2c 30 2e 39 32 35 37 38 20 2d 33 2e 33 36 33 32 38 2c 30 2e 39 32 35 37 38 20 2d 32 2e 38 33 35 39 34 2c 30 20 2d 34 2e 31 38 33 35 39 2c 2d 31 2e 37 31 30 39 34 20 2d 30 2e 38 35 35 34 37 2c 2d 31 2e 30 36 36 34 20 2d 30 2e 39 30 32 33 35 2c 2d 32 2e 38 33 35 39 33 33 20 68 20 31 2e 34 36 34 38 35 20 71 20 30 2e 30 39 33 37 2c 31 2e 32 37 37 33 34 33 20 30 2e 35 37 34 32 32 2c 31 2e 39 34 35 33 31 33 20 30 2e 39 31 34 30 36 2c 31 2e 32 38 39 30 36 20 33 2e 30 37 30 33 31 2c 31 2e 32 38 39 30 36 20 31 2e 36 30 35 34 37 2c 30 20 32 2e 34 38 34 33 37 2c 2d 30 2e 36 37 39 36 39 20 30 2e 39 32 35 37 38 2c 2d 30 2e 37 31 34 38 34 20 30 2e 39 32 35 37 38 2c 2d 31 2e 38 30 34 36 38 20 30 2c 2d 30 2e 39 33 37 35 30 33 20 2d 30 2e 37 32 36 35 36 Data Ascii: 1.3125,0.92578 -3.36328,0.92578 -2.83594,0 -4.18359,-1.71094 -0.85547,-1.0664 -0.90235,-2.835933 h 1.46485 q 0.0937,1.277343 0.57422,1.945313 0.91406,1.28906 3.07031,1.28906 1.60547,0 2.48437,-0.67969 0.92578,-0.71484 0.92578,-1.80468 0,-0.937503 -0.72656
2024-05-21 09:21:12 UTC	15378	IN	Data Raw: 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 42 42 3b 2d 69 6e 6b 73 63 61 70 65 2d 66 6f 6e 74 2d 73 70 65 63 69 66 69 63 61 74 69 6f 6e 3a 27 53 42 42 20 4c 69 67 68 74 27 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 65 6e 64 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 30 2e 36 39 70 78 3b 74 65 78 74 2d 61 6e 63 68 6f 72 3a 65 6e 64 3b 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 0a 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 61 74 68 34 34 37 34 22 0a 20 20 20 20 20 20 20 20 20 69 6e 6b 73 63 61 70 65 3a 63 6f 6e 6e 65 63 74 6f 72 2d 63 75 72 76 61 74 75 72 65 3d 22 30 22 Data Ascii: ;font-weight:300;font-stretch:normal;font-size:24px;line-height:0;font-family:SBB;-inkscape-font-specification:'SBB Light';text-align:end;letter-spacing:-0.69px;text-anchor:end;fill:#ffffff" id="path4474" inkscape:connector-curvature="0"
2024-05-21 09:21:13 UTC	16384	IN	Data Raw: 2e 33 36 33 32 38 20 30 2e 36 30 39 33 38 2c 2d 30 2e 31 30 35 34 37 20 33 2e 30 37 30 33 32 2c 2d 30 2e 33 35 31 35 36 20 31 2e 31 32 35 2c 2d 30 2e 31 31 37 31 39 20 31 2e 35 34 36 38 37 2c 2d 30 2e 34 36 38 37 35 20 30 2e 34 32 31 38 38 2c 2d 30 2e 33 35 31 35 37 20 30 2e 34 32 31 38 38 2c 2d 31 2e 31 37 31 38 38 20 30 2c 2d 31 2e 34 36 34 38 34 20 2d 30 2e 37 38 35 31 36 2c 2d 32 2e 31 30 39 33 37 20 2d 30 2e 38 33 32 30 33 2c 2d 30 2e 36 36 37 39 37 20 2d 32 2e 34 33 37 35 2c 2d 30 2e 36 36 37 39 37 20 2d 31 2e 36 30 35 34 37 2c 30 20 2d 32 2e 34 32 35 37 38 2c 30 2e 37 32 36 35 36 20 2d 30 2e 38 30 38 36 2c 30 2e 37 31 34 38 34 20 2d 30 2e 39 36 30 39 34 2c 32 2e 32 37 33 34 34 20 68 20 2d 31 2e 34 35 33 31 32 20 71 20 30 2e 30 39 33 37 2c 2d 32 2e Data Ascii: .36328 0.60938,-0.10547 3.07032,-0.35156 1.125,-0.11719 1.54687,-0.46875 0.42188,-0.35157 0.42188,-1.17188 0,-1.46484 -0.78516,-2.10937 -0.83203,-0.66797 -2.4375,-0.66797 -1.60547,0 -2.42578,0.72656 -0.8086,0.71484 -0.96094,2.27344 h -1.45312 q 0.0937,-2.
2024-05-21 09:21:13 UTC	3188	IN	Data Raw: 2d 34 2e 38 30 34 36 39 20 30 2c 2d 33 2e 31 36 34 30 36 20 31 2e 35 34 36 38 37 2c 2d 34 2e 39 35 37 30 33 20 31 2e 35 34 36 38 38 2c 2d 31 2e 37 39 32 39 37 20 34 2e 30 31 39 35 33 2c 2d 31 2e 37 39 32 39 37 20 33 2e 31 32 38 39 31 2c 30 20 34 2e 33 39 34 35 33 2c 32 2e 36 31 33 32 38 20 76 20 2d 36 2e 36 32 31 30 39 20 7a 20 6d 20 2d 35 2e 38 30 30 37 38 2c 35 2e 33 32 30 33 31 20 71 20 2d 31 2e 38 31 36 34 2c 30 20 2d 32 2e 39 35 33 31 32 2c 31 2e 33 38 32 38 31 20 2d 31 2e 31 39 35 33 32 2c 31 2e 34 36 34 38 34 20 2d 31 2e 31 39 35 33 32 2c 34 2e 30 31 39 35 33 20 30 2c 32 2e 33 33 32 30 33 20 31 2e 30 33 31 32 35 2c 33 2e 38 33 32 30 33 20 31 2e 31 31 33 32 39 2c 31 2e 36 34 30 36 33 20 33 2e 31 38 37 35 2c 31 2e 36 34 30 36 33 20 32 2e 30 30 33 39 Data Ascii: -4.80469 0,-3.16406 1.54687,-4.95703 1.54688,-1.79297 4.01953,-1.79297 3.12891,0 4.39453,2.61328 v -6.62109 z m -5.80078,5.32031 q -1.8164,0 -2.95312,1.38281 -1.19532,1.46484 -1.19532,4.01953 0,2.33203 1.03125,3.83203 1.11329,1.64063 3.1875,1.64063 2.0039
2024-05-21 09:21:13 UTC	16384	IN	Data Raw: 36 30 39 33 2c 30 2e 36 33 32 38 31 20 30 2e 36 32 31 31 2c 30 2e 32 34 36 31 20 32 2e 32 32 36 35 37 2c 30 2e 36 32 31 31 20 32 2e 33 32 30 33 31 2c 30 2e 35 33 39 30 36 20 33 2e 33 31 36 34 2c 31 2e 32 30 37 30 33 20 30 2e 36 30 39 33 38 2c 30 2e 34 32 31 38 37 20 30 2e 39 34 39 32 32 2c 31 2e 31 30 31 35 36 20 30 2e 33 35 31 35 36 2c 30 2e 36 37 39 36 39 20 30 2e 33 35 31 35 36 2c 31 2e 34 37 36 35 36 20 30 2c 30 2e 38 37 38 39 31 20 2d 30 2e 34 31 30 31 35 2c 31 2e 36 36 34 30 37 20 2d 30 2e 34 31 30 31 36 2c 30 2e 37 38 35 31 35 20 2d 31 2e 31 34 38 34 34 2c 31 2e 33 30 30 37 38 20 2d 31 2e 33 31 32 35 2c 30 2e 39 32 35 37 38 20 2d 33 2e 33 36 33 32 38 2c 30 2e 39 32 35 37 38 20 2d 32 2e 38 33 35 39 34 2c 30 20 2d 34 2e 31 38 33 35 39 2c 2d 31 2e 37 Data Ascii: 6093,0.63281 0.6211,0.2461 2.22657,0.6211 2.32031,0.53906 3.3164,1.20703 0.60938,0.42187 0.94922,1.10156 0.35156,0.67969 0.35156,1.47656 0,0.87891 -0.41015,1.66407 -0.41016,0.78515 -1.14844,1.30078 -1.3125,0.92578 -3.36328,0.92578 -2.83594,0 -4.18359,-1.7
2024-05-21 09:21:13 UTC	3188	IN	Data Raw: 67 68 74 27 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 65 6e 64 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 30 2e 36 39 70 78 3b 74 65 78 74 2d 61 6e 63 68 6f 72 3a 65 6e 64 3b 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 0a 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 61 74 68 34 35 33 39 22 0a 20 20 20 20 20 20 20 20 20 69 6e 6b 73 63 61 70 65 3a 63 6f 6e 6e 65 63 74 6f 72 2d 63 75 72 76 61 74 75 72 65 3d 22 30 22 20 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 64 3d 22 6d 20 33 39 38 2e 37 38 31 39 37 2c 31 39 35 2e 33 35 32 39 34 20 76 20 31 2e 32 33 30 34 36 20 71 20 2d 30 2e 35 36 32 35 2c 30 2e 31 39 39 32 32 20 2d 31 2e 32 31 38 37 35 2c 30 2e 31 39 39 32 32 20 2d 30 2e 38 37 38 39 31 2c 30 20 2d 31 2e 32 34 32 31 39 2c 2d 30 2e Data Ascii: ght';text-align:end;letter-spacing:-0.69px;text-anchor:end;fill:#ffffff" id="path4539" inkscape:connector-curvature="0" /> <path d="m 398.78197,195.35294 v 1.23046 q -0.5625,0.19922 -1.21875,0.19922 -0.87891,0 -1.24219,-0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49718	193.203.121.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:12 UTC	612	OUT	GET //resources/img/logo-20200819.svg HTTP/1.1 Host: www.swisspass.ch Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://jaz.wxk.mybluehost.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:12 UTC	890	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:12 GMT Server: Apache Content-Length: 7374 last-modified: Fri, 26 Apr 2024 10:42:00 GMT etag: "662b84f8-1cce" expires: Wed, 21 May 2025 09:21:12 GMT cache-control: max-age=31536000 accept-ranges: bytes cache-control: private X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=16070400 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: same-origin Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self' Set-Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2; Path=/; Domain=.swisspass.ch; Secure; HttpOnly; SameSite=None Connection: close Content-Type: image/svg+xml
2024-05-21 09:21:12 UTC	7374	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 32 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 32 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 3e 53 77 69 73 73 50 61 73 73 5f 57 6f 72 74 6d 61 72 6b 65 3c 2f 74 69 74 6c 65 3e 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 2e 37 35 20 31 38 2e 38 36 61 34 2e 38 37 20 34 2e 38 37 20 30 20 30 20 30 20 31 2e 35 39 20 31 2e 39 20 36 2e 36 36 20 36 2e 36 36 20 30 20 30 20 30 20 32 2e 34 20 31 20 31 33 2e 36 34 20 31 33 2e 36 34 20 30 20 30 20 30 20 33 20 2e 33 31 20 38 2e 33 36 20 38 2e 33 36 Data Ascii: <svg width="152" height="24" viewBox="0 0 152 24" xmlns="http://www.w3.org/2000/svg"><title>SwissPass_Wortmarke</title><g fill="#FFF" fill-rule="evenodd"><path d="M2.75 18.86a4.87 4.87 0 0 0 1.59 1.9 6.66 6.66 0 0 0 2.4 1 13.64 13.64 0 0 0 3 .31 8.36 8.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49720	52.57.73.234	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:13 UTC	587	OUT	GET /fonts/v1_6_subset/SBBWeb-Light.woff2 HTTP/1.1 Host: cdn.app.sbb.ch Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://jaz.wxk.mybluehost.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: http://jaz.wxk.mybluehost.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:13 UTC	808	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:13 GMT Content-Type: application/font-woff2 Content-Length: 14212 Connection: close server: nginx/1.25.5 last-modified: Wed, 31 Jan 2024 10:14:44 GMT vary: Accept-Encoding etag: "65ba1d94-3784" expires: Wed, 21 May 2025 09:21:13 GMT cache-control: max-age=31536000 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Mx-ReqToken,X-Requested-With cache-control: public accept-ranges: bytes set-cookie: 9527f1a32486d650b0687919ffd41c2b=05bb604eb9f27937d92d021e3017232c; path=/; HttpOnly; Secure; SameSite=None cache-control: private
2024-05-21 09:21:13 UTC	14212	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 37 84 00 10 00 00 00 00 78 10 00 00 37 23 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b bb 36 1c 83 42 06 60 00 82 4a 08 04 11 08 0a 81 91 58 f4 5d 0b 83 04 00 01 36 02 24 03 86 04 04 20 05 8b 7d 07 83 35 1b f4 66 15 d3 0d f7 20 b7 03 10 55 f2 c4 2e 8a 5a 2d 48 e5 66 ff 7f 4c a0 43 86 a5 bb 01 d8 f4 2a 5c 66 5a 44 89 90 ca 88 6d 11 66 34 aa 50 da a3 c2 9d 9c 21 72 e7 f2 60 0b 9b d8 9d e9 5a 95 ea 4e 4d d9 7d 74 3a 96 6a b4 95 f5 fc 9f d8 4d 09 77 0c b3 4d 06 1c 0b f7 75 4b 2f fa 02 91 c8 06 d6 1e c1 60 12 bd 3f 41 df ea 08 87 b8 ca 19 38 ce 47 cd e5 a1 6f 8d ec 57 77 f5 4c 88 15 90 03 c2 e7 d9 03 82 f0 11 26 3a c6 ad d0 01 92 39 60 77 76 7b 08 dc 75 28 f3 ff d9 6f fc db ff Data Ascii: wOF27x7#?FFTM6B`JX]6$ }5f U.Z-HfLC*\fZDmf4P!r`ZNM}t:jMwMuK/`?A8GoWwL&:9`wv{u(o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49722	193.203.121.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:13 UTC	460	OUT	GET //resources/img/logo-20200819.svg HTTP/1.1 Host: www.swisspass.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
2024-05-21 09:21:14 UTC	711	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:14 GMT Server: Apache Content-Length: 7374 last-modified: Fri, 26 Apr 2024 10:42:00 GMT etag: "662b84f8-1cce" expires: Wed, 21 May 2025 09:21:14 GMT cache-control: max-age=31536000 accept-ranges: bytes X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=16070400 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: same-origin Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self' Connection: close Content-Type: image/svg+xml
2024-05-21 09:21:14 UTC	7374	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 32 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 32 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 3e 53 77 69 73 73 50 61 73 73 5f 57 6f 72 74 6d 61 72 6b 65 3c 2f 74 69 74 6c 65 3e 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 2e 37 35 20 31 38 2e 38 36 61 34 2e 38 37 20 34 2e 38 37 20 30 20 30 20 30 20 31 2e 35 39 20 31 2e 39 20 36 2e 36 36 20 36 2e 36 36 20 30 20 30 20 30 20 32 2e 34 20 31 20 31 33 2e 36 34 20 31 33 2e 36 34 20 30 20 30 20 30 20 33 20 2e 33 31 20 38 2e 33 36 20 38 2e 33 36 Data Ascii: <svg width="152" height="24" viewBox="0 0 152 24" xmlns="http://www.w3.org/2000/svg"><title>SwissPass_Wortmarke</title><g fill="#FFF" fill-rule="evenodd"><path d="M2.75 18.86a4.87 4.87 0 0 0 1.59 1.9 6.66 6.66 0 0 0 2.4 1 13.64 13.64 0 0 0 3 .31 8.36 8.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49723	193.203.121.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:13 UTC	468	OUT	GET //resources/img/logo_text_de-20200819.svg HTTP/1.1 Host: www.swisspass.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
2024-05-21 09:21:14 UTC	714	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:14 GMT Server: Apache Content-Length: 139971 last-modified: Fri, 26 Apr 2024 10:42:00 GMT etag: "662b84f8-222c3" expires: Wed, 21 May 2025 09:21:14 GMT cache-control: max-age=31536000 accept-ranges: bytes X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=16070400 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: same-origin Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self' Connection: close Content-Type: image/svg+xml
2024-05-21 09:21:14 UTC	2476	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 0a 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg"
2024-05-21 09:21:14 UTC	13980	IN	Data Raw: 20 20 69 64 3d 22 70 6f 6c 79 67 6f 6e 33 39 37 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 32 33 33 2e 38 37 2c 39 38 2e 37 31 20 32 33 32 2e 32 36 2c 39 38 2e 37 31 20 32 33 32 2e 32 36 2c 31 30 30 2e 30 39 20 32 33 33 2e 38 37 2c 31 30 30 2e 30 39 20 32 33 33 2e 38 37 2c 31 30 31 2e 37 20 32 33 35 2e 32 35 2c 31 30 31 2e 37 20 32 33 35 2e 32 35 2c 31 30 30 2e 30 39 20 32 33 36 2e 38 36 2c 31 30 30 2e 30 39 20 32 33 36 2e 38 36 2c 39 38 2e 37 31 20 32 33 35 2e 32 35 2c 39 38 2e 37 31 20 32 33 35 2e 32 35 Data Ascii: id="polygon3979" style="fill:#ffffff" /> <polygon class="cls-1" points="233.87,98.71 232.26,98.71 232.26,100.09 233.87,100.09 233.87,101.7 235.25,101.7 235.25,100.09 236.86,100.09 236.86,98.71 235.25,98.71 235.25
2024-05-21 09:21:14 UTC	4194	IN	Data Raw: 33 2c 35 35 2e 31 35 20 31 34 33 2e 39 31 2c 35 35 2e 31 35 20 31 34 33 2e 39 31 2c 35 36 2e 37 36 20 31 34 35 2e 32 39 2c 35 36 2e 37 36 20 31 34 35 2e 32 39 2c 35 35 2e 31 35 20 31 34 36 2e 39 2c 35 35 2e 31 35 20 31 34 36 2e 39 2c 35 33 2e 37 36 20 31 34 35 2e 32 39 2c 35 33 2e 37 36 20 31 34 35 2e 32 39 2c 35 32 2e 31 36 20 31 34 33 2e 39 31 2c 35 32 2e 31 36 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 6f 6c 79 67 6f 6e 34 30 37 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 73 3d 22 31 34 33 2e 39 31 Data Ascii: 3,55.15 143.91,55.15 143.91,56.76 145.29,56.76 145.29,55.15 146.9,55.15 146.9,53.76 145.29,53.76 145.29,52.16 143.91,52.16 " id="polygon4079" style="fill:#ffffff" /> <polygon class="cls-1" points="143.91
2024-05-21 09:21:14 UTC	6990	IN	Data Raw: 20 70 6f 69 6e 74 73 3d 22 32 36 33 2e 38 37 2c 39 38 2e 37 31 20 32 36 32 2e 32 36 2c 39 38 2e 37 31 20 32 36 32 2e 32 36 2c 31 30 30 2e 30 39 20 32 36 33 2e 38 37 2c 31 30 30 2e 30 39 20 32 36 33 2e 38 37 2c 31 30 31 2e 37 20 32 36 35 2e 32 35 2c 31 30 31 2e 37 20 32 36 35 2e 32 35 2c 31 30 30 2e 30 39 20 32 36 36 2e 38 37 2c 31 30 30 2e 30 39 20 32 36 36 2e 38 37 2c 39 38 2e 37 31 20 32 36 35 2e 32 35 2c 39 38 2e 37 31 20 32 36 35 2e 32 35 2c 39 37 2e 31 20 32 36 33 2e 38 37 2c 39 37 2e 31 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 6f 6c 79 67 6f 6e 34 31 30 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 0a 20 20 20 20 20 20 Data Ascii: points="263.87,98.71 262.26,98.71 262.26,100.09 263.87,100.09 263.87,101.7 265.25,101.7 265.25,100.09 266.87,100.09 266.87,98.71 265.25,98.71 265.25,97.1 263.87,97.1 " id="polygon4109" style="fill:#ffffff" /> <polygon
2024-05-21 09:21:14 UTC	11184	IN	Data Raw: 2e 37 2c 30 2e 36 31 20 61 20 37 2e 38 32 2c 37 2e 38 32 20 30 20 30 20 31 20 31 2e 37 32 2c 30 2e 34 37 20 35 2e 35 36 2c 35 2e 35 36 20 30 20 30 20 31 20 31 2e 35 31 2c 30 2e 38 39 20 34 2e 33 34 2c 34 2e 33 34 20 30 20 30 20 31 20 31 2e 30 38 2c 31 2e 33 35 20 34 2e 30 39 2c 34 2e 30 39 20 30 20 30 20 31 20 30 2e 34 32 2c 31 2e 39 20 34 2e 31 36 2c 34 2e 31 36 20 30 20 30 20 31 20 2d 30 2e 36 31 2c 32 2e 33 20 35 2c 35 20 30 20 30 20 31 20 2d 31 2e 35 36 2c 31 2e 35 35 20 36 2e 36 33 2c 36 2e 36 33 20 30 20 30 20 31 20 2d 32 2e 31 34 2c 30 2e 38 35 20 31 31 2e 32 31 2c 31 31 2e 32 31 20 30 20 30 20 31 20 2d 32 2e 33 35 2c 30 2e 32 36 20 41 20 37 2e 36 34 2c 37 2e 36 34 20 30 20 30 20 31 20 36 38 2e 31 33 2c 32 32 2e 35 35 20 35 2e 39 2c 35 2e 39 20 30 Data Ascii: .7,0.61 a 7.82,7.82 0 0 1 1.72,0.47 5.56,5.56 0 0 1 1.51,0.89 4.34,4.34 0 0 1 1.08,1.35 4.09,4.09 0 0 1 0.42,1.9 4.16,4.16 0 0 1 -0.61,2.3 5,5 0 0 1 -1.56,1.55 6.63,6.63 0 0 1 -2.14,0.85 11.21,11.21 0 0 1 -2.35,0.26 A 7.64,7.64 0 0 1 68.13,22.55 5.9,5.9 0
2024-05-21 09:21:14 UTC	2796	IN	Data Raw: 64 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 30 2e 36 39 70 78 3b 74 65 78 74 2d 61 6e 63 68 6f 72 3a 65 6e 64 3b 66 69 6c 6c 3a 23 66 66 66 66 66 66 22 0a 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 61 74 68 34 34 35 38 22 0a 20 20 20 20 20 20 20 20 20 69 6e 6b 73 63 61 70 65 3a 63 6f 6e 6e 65 63 74 6f 72 2d 63 75 72 76 61 74 75 72 65 3d 22 30 22 20 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 64 3d 22 4d 20 34 33 39 2e 33 39 31 36 38 2c 39 30 2e 37 31 33 39 32 31 20 56 20 31 30 33 2e 34 35 32 32 20 68 20 2d 31 2e 34 31 37 39 37 20 76 20 2d 32 2e 33 34 33 37 35 20 71 20 2d 31 2e 34 30 36 32 35 2c 32 2e 37 31 38 37 35 20 2d 34 2e 33 33 35 39 34 2c 32 2e 37 31 38 37 35 20 2d 31 2e 30 35 34 36 39 2c 30 20 2d 31 2e 39 38 30 Data Ascii: d;letter-spacing:-0.69px;text-anchor:end;fill:#ffffff" id="path4458" inkscape:connector-curvature="0" /> <path d="M 439.39168,90.713921 V 103.4522 h -1.41797 v -2.34375 q -1.40625,2.71875 -4.33594,2.71875 -1.05469,0 -1.980
2024-05-21 09:21:14 UTC	1398	IN	Data Raw: 31 2e 33 31 32 35 2c 30 2e 39 32 35 37 38 20 2d 33 2e 33 36 33 32 38 2c 30 2e 39 32 35 37 38 20 2d 32 2e 38 33 35 39 34 2c 30 20 2d 34 2e 31 38 33 35 39 2c 2d 31 2e 37 31 30 39 34 20 2d 30 2e 38 35 35 34 37 2c 2d 31 2e 30 36 36 34 20 2d 30 2e 39 30 32 33 35 2c 2d 32 2e 38 33 35 39 33 33 20 68 20 31 2e 34 36 34 38 35 20 71 20 30 2e 30 39 33 37 2c 31 2e 32 37 37 33 34 33 20 30 2e 35 37 34 32 32 2c 31 2e 39 34 35 33 31 33 20 30 2e 39 31 34 30 36 2c 31 2e 32 38 39 30 36 20 33 2e 30 37 30 33 31 2c 31 2e 32 38 39 30 36 20 31 2e 36 30 35 34 37 2c 30 20 32 2e 34 38 34 33 37 2c 2d 30 2e 36 37 39 36 39 20 30 2e 39 32 35 37 38 2c 2d 30 2e 37 31 34 38 34 20 30 2e 39 32 35 37 38 2c 2d 31 2e 38 30 34 36 38 20 30 2c 2d 30 2e 39 33 37 35 30 33 20 2d 30 2e 37 32 36 35 36 Data Ascii: 1.3125,0.92578 -3.36328,0.92578 -2.83594,0 -4.18359,-1.71094 -0.85547,-1.0664 -0.90235,-2.835933 h 1.46485 q 0.0937,1.277343 0.57422,1.945313 0.91406,1.28906 3.07031,1.28906 1.60547,0 2.48437,-0.67969 0.92578,-0.71484 0.92578,-1.80468 0,-0.937503 -0.72656
2024-05-21 09:21:14 UTC	11184	IN	Data Raw: 2d 30 2e 30 38 32 2c 2d 31 2e 36 30 35 34 36 39 20 2d 30 2e 37 32 36 35 37 2c 2d 32 2e 36 36 30 31 35 37 20 2d 31 2e 31 31 33 32 38 2c 2d 31 2e 38 33 39 38 34 33 20 2d 33 2e 32 32 32 36 35 2c 2d 31 2e 38 33 39 38 34 33 20 2d 31 2e 34 32 39 36 39 2c 30 20 2d 32 2e 34 37 32 36 36 2c 30 2e 38 37 38 39 30 36 20 2d 31 2e 33 31 32 35 2c 31 2e 31 31 33 32 38 31 20 2d 31 2e 36 30 35 34 37 2c 33 2e 36 32 31 30 39 34 20 7a 22 0a 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 Data Ascii: -0.082,-1.605469 -0.72657,-2.660157 -1.11328,-1.839843 -3.22265,-1.839843 -1.42969,0 -2.47266,0.878906 -1.3125,1.113281 -1.60547,3.621094 z" style="font-style:normal;font-variant:normal;font-weight:300;font-stretch:normal;font-size:24px;line-heig
2024-05-21 09:21:14 UTC	12582	IN	Data Raw: 39 2c 31 2e 33 33 35 39 34 20 2d 33 2e 34 34 35 33 31 2c 31 2e 33 33 35 39 34 20 2d 32 2e 36 36 30 31 36 2c 30 20 2d 34 2e 31 38 33 35 39 2c 2d 31 2e 39 34 35 33 31 20 2d 31 2e 34 32 39 36 39 2c 2d 31 2e 38 33 39 38 34 20 2d 31 2e 34 32 39 36 39 2c 2d 34 2e 38 30 34 36 39 20 30 2c 2d 33 2e 31 36 34 30 36 20 31 2e 35 34 36 38 37 2c 2d 34 2e 39 35 37 30 33 20 31 2e 35 34 36 38 38 2c 2d 31 2e 37 39 32 39 37 20 34 2e 30 31 39 35 34 2c 2d 31 2e 37 39 32 39 37 20 33 2e 31 32 38 39 2c 30 20 34 2e 33 39 34 35 33 2c 32 2e 36 31 33 32 38 20 76 20 2d 36 2e 36 32 31 30 39 20 7a 20 6d 20 2d 35 2e 38 30 30 37 39 2c 35 2e 33 32 30 33 31 20 71 20 2d 31 2e 38 31 36 34 2c 30 20 2d 32 2e 39 35 33 31 32 2c 31 2e 33 38 32 38 31 20 2d 31 2e 31 39 35 33 31 2c 31 2e 34 36 34 38 Data Ascii: 9,1.33594 -3.44531,1.33594 -2.66016,0 -4.18359,-1.94531 -1.42969,-1.83984 -1.42969,-4.80469 0,-3.16406 1.54687,-4.95703 1.54688,-1.79297 4.01954,-1.79297 3.1289,0 4.39453,2.61328 v -6.62109 z m -5.80079,5.32031 q -1.8164,0 -2.95312,1.38281 -1.19531,1.4648
2024-05-21 09:21:14 UTC	8388	IN	Data Raw: 6c 6c 3a 23 66 66 66 66 66 66 22 0a 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 61 74 68 34 36 30 38 22 0a 20 20 20 20 20 20 20 20 20 69 6e 6b 73 63 61 70 65 3a 63 6f 6e 6e 65 63 74 6f 72 2d 63 75 72 76 61 74 75 72 65 3d 22 30 22 20 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 64 3d 22 6d 20 32 34 32 2e 34 33 37 30 35 2c 32 34 33 2e 32 39 31 36 36 20 71 20 32 2e 36 38 33 35 39 2c 30 20 34 2e 33 30 30 37 38 2c 32 2e 30 30 33 39 20 31 2e 34 35 33 31 32 2c 31 2e 37 36 39 35 33 20 31 2e 34 35 33 31 32 2c 34 2e 37 38 31 32 35 20 30 2c 33 2e 31 38 37 35 20 2d 31 2e 36 37 35 37 38 2c 34 2e 39 39 32 31 39 20 2d 31 2e 35 39 33 37 35 2c 31 2e 37 31 30 39 34 20 2d 34 2e 31 36 30 31 35 2c 31 2e 37 31 30 39 34 20 2d 32 2e 38 33 35 39 34 2c 30 Data Ascii: ll:#ffffff" id="path4608" inkscape:connector-curvature="0" /> <path d="m 242.43705,243.29166 q 2.68359,0 4.30078,2.0039 1.45312,1.76953 1.45312,4.78125 0,3.1875 -1.67578,4.99219 -1.59375,1.71094 -4.16015,1.71094 -2.83594,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49725	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:15 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-21 09:21:15 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=197293 Date: Tue, 21 May 2024 09:21:15 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49728	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-21 09:21:16 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=197323 Date: Tue, 21 May 2024 09:21:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-21 09:21:16 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49731	104.21.70.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:24 UTC	650	OUT	GET /home HTTP/1.1 Host: corporatedefenseetl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:24 UTC	648	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 21 May 2024 09:21:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://corporatedefenseetl.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8B6jy0EZpyYbZZ3BYJtHT0eTRNg3VgaXN8oUH%2BqinK0TdSavJB2LH6iy5IiPJch4kj4r27ZJumFMpEYOe4ePUrKkBpmZ49FUd%2BAXfL5cPoEcTpaChqtt9mb1%2Fi1oW9Yw1g1x0NwT1X%2B4qw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737efef9b4430e-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:24 UTC	377	IN	Data Raw: 31 37 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 63 6f 72 70 6f 72 61 74 65 64 65 66 65 6e 73 65 65 74 6c 2e 63 6f 6d 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 6f 72 70 6f 72 61 74 65 64 65 66 65 6e 73 65 65 74 6c 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 Data Ascii: 172<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://corporatedefenseetl.com'" /> <title>Redirecting to https://corporatedefenseetl.com</title> </head> <body>
2024-05-21 09:21:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49732	104.21.70.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:24 UTC	646	OUT	GET / HTTP/1.1 Host: corporatedefenseetl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:25 UTC	682	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private location: https://custommapposter.com/article/top/926 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NlFfYrcTdApHxcr4rYB4cHW8JK%2Bh1yUZS5QMOsR3iKnHbw6S%2BJSGuNE8RSBWnv327xwoYqgX2t1yYJXORY6VeL9eCEZxajlVAC0uGXpMoFwqSMyVT8nvllivoS98yOxCDif3C%2FlpZN2v%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f0319288c5f-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:25 UTC	425	IN	Data Raw: 31 61 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 3c 2f 74 69 74 6c 65 3e 0a Data Ascii: 1a2<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://custommapposter.com/article/top/926'" /> <title>Redirecting to https://custommapposter.com/article/top/926</title>
2024-05-21 09:21:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49735	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:26 UTC	657	OUT	GET /article/top/926 HTTP/1.1 Host: custommapposter.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:26 UTC	722	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: immutable, max-age=31536000, public x-robots-tag: noindex, nofollow CF-Cache-Status: HIT Age: 288405 Last-Modified: Sat, 18 May 2024 01:14:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHTMyvf7dg1capeX6EYAv%2Bx%2B9LrPiiF%2Bah2BW9DF27ldpwEd3nDvs70jzajKMJWJnNBYXVoRb9OaiYQelT59RNc%2FFnQ3T%2BJeoIAtv8GtAGsC3njnZv2Hs8hyL345l8l%2FCqcUwX22"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f0b2c3ac32f-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:26 UTC	647	IN	Data Raw: 37 63 64 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 43 32 66 61 51 55 72 4d 41 44 4d 68 51 4c 50 59 32 70 43 4e 42 64 5a 58 5a 46 39 53 79 74 71 42 36 33 69 43 75 6c 55 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c Data Ascii: 7cd8<!DOCTYPE html><html><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="csrf-token" content="LC2faQUrMADMhQLPY2pCNBdZXZF9SytqB63iCulU"> <meta name="robots" content="noindex, nofol
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 35 46 45 37 35 45 32 39 39 33 38 46 45 31 44 30 44 44 35 34 42 41 44 32 42 32 35 43 39 39 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 41 32 30 39 32 30 46 45 38 42 32 36 39 33 41 38 34 34 36 39 33 43 41 37 42 32 44 41 30 33 34 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 34 34 33 35 32 37 39 36 32 39 38 34 45 44 36 31 31 33 45 37 31 43 32 45 31 43 31 45 36 46 43 43 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 35 38 44 34 39 46 32 34 35 38 46 45 36 43 38 45 36 34 32 39 30 Data Ascii: e.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" /><meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" /><meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" /><meta name="msvalidate.01" content="58D49F2458FE6C8E64290
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 46 37 42 33 42 44 32 46 45 36 39 30 37 32 42 43 43 45 34 31 32 36 42 39 43 43 35 30 34 35 43 42 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 38 45 46 39 35 41 44 32 31 32 41 44 44 34 38 43 38 37 38 46 32 31 42 31 39 33 41 42 38 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 43 32 35 44 41 37 34 43 38 46 46 35 46 41 42 31 34 32 46 43 37 30 32 30 34 42 42 30 37 41 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 31 44 30 Data Ascii: ta name="msvalidate.01" content="F7B3BD2FE69072BCCE4126B9CC5045CB" /><meta name="msvalidate.01" content="98EF95AD212ADD48C878F21B193AB8E4" /><meta name="msvalidate.01" content="7C25DA74C8FF5FAB142FC70204BB07A6" /><meta name="msvalidate.01" content="1D0
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 32 35 37 33 44 31 44 43 43 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 36 38 32 37 32 43 39 44 31 46 31 37 46 34 33 41 33 36 42 45 46 39 30 30 43 33 37 39 32 33 37 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 35 32 42 36 38 46 39 33 31 34 32 37 33 32 45 41 42 37 43 43 42 37 41 35 44 37 37 36 44 31 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 42 31 41 39 39 42 44 44 37 44 36 31 35 36 42 33 30 41 37 38 45 36 38 46 33 36 35 43 39 46 38 33 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 Data Ascii: 2573D1DCC6" /><meta name="msvalidate.01" content="968272C9D1F17F43A36BEF900C379237" /><meta name="msvalidate.01" content="752B68F93142732EAB7CCB7A5D776D16" /><meta name="msvalidate.01" content="B1A99BDD7D6156B30A78E68F365C9F83" /><meta name="msvalidat
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 74 2e 20 43 72 79 70 74 6f 20 6d 69 6e 69 6e 67 20 61 70 70 73 20 66 6f 72 20 69 50 68 6f 6e 65 20 61 6e 64 20 69 50 61 64 20 75 73 65 72 73 20 61 72 65 20 70 72 65 74 74 79 20 63 6f 6d 6d 6f 6e 20 74 68 65 73 65 20 64 61 79 73 2e 2e 2e 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 70 75 62 6c 69 73 68 65 64 5f 74 69 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 32 34 2d 30 35 2d 31 38 54 30 38 3a 31 34 3a 34 31 2b 30 37 3a 30 30 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 6d 6f 64 69 66 69 65 64 5f 74 69 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 32 34 2d 30 35 2d 31 38 54 30 38 3a 31 34 3a 34 31 2b 30 37 3a 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 Data Ascii: t. Crypto mining apps for iPhone and iPad users are pretty common these days..."><meta property="article:published_time" content="2024-05-18T08:14:41+07:00"><meta property="article:modified_time" content="2024-05-18T08:14:41+07:00"><link rel="canonical" h
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 72 61 6e 67 65 20 6f 66 20 75 73 65 73 2c 20 61 6e 64 20 72 65 71 75 69 72 65 73 20 6c 69 74 74 6c 65 20 75 70 66 72 6f 6e 74 20 69 6e 76 65 73 74 6d 65 6e 74 2e 20 43 72 79 70 74 6f 20 6d 69 6e 69 6e 67 20 61 70 70 73 20 66 6f 72 20 69 50 68 6f 6e 65 20 61 6e 64 20 69 50 61 64 20 75 73 65 72 73 20 61 72 65 20 70 72 65 74 74 79 20 63 6f 6d 6d 6f 6e 20 74 68 65 73 65 20 64 61 79 73 2e 2e 2e 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 74 73 32 2e 6d 6d 2e 62 69 6e 67 2e 6e 65 74 2f 74 68 3f 71 3d 31 30 20 42 65 73 74 20 43 72 79 70 74 6f 20 4d 69 6e 69 6e 67 20 41 70 70 73 20 66 6f 72 20 69 50 68 6f 6e 65 20 61 6e 64 20 69 50 61 64 20 28 32 30 32 34 29 22 20 Data Ascii: range of uses, and requires little upfront investment. Crypto mining apps for iPhone and iPad users are pretty common these days..." /><meta name="twitter:image" content="https://ts2.mm.bing.net/th?q=10 Best Crypto Mining Apps for iPhone and iPad (2024)"
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 72 22 3a 7b 22 40 74 79 70 65 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 65 78 74 22 3a 22 43 72 79 70 74 6f 54 61 62 2e 20 3c 62 3e 54 72 79 20 43 72 79 70 74 6f 54 61 62 2c 20 74 68 65 20 77 6f 72 6c 64 27 73 20 66 69 72 73 74 20 62 72 6f 77 73 65 72 20 77 69 74 68 20 6d 69 6e 69 6e 67 20 66 65 61 74 75 72 65 73 20 61 6e 64 20 69 74 20 77 6f 72 6b 73 20 6f 6e 20 64 65 73 6b 74 6f 70 20 28 57 69 6e 64 6f 77 73 20 26 61 6d 70 3b 20 4d 61 63 29 20 6f 72 20 73 6d 61 72 74 70 68 6f 6e 65 20 28 41 6e 64 72 6f 69 64 20 26 61 6d 70 3b 20 69 50 68 6f 6e 65 2f 69 50 61 64 29 3c 2f 62 3e 2e 20 45 61 72 6e 20 62 69 74 63 6f 69 6e 20 77 69 74 68 6f 75 74 20 6c 6f 6f 6b 69 6e 67 20 75 70 20 66 72 6f 6d 20 77 61 74 63 68 69 6e 67 20 76 69 64 65 6f 73 2c 20 63 68 61 74 74 Data Ascii: r":{"@type":"Answer","text":"CryptoTab. <b>Try CryptoTab, the world's first browser with mining features and it works on desktop (Windows & Mac) or smartphone (Android & iPhone/iPad)</b>. Earn bitcoin without looking up from watching videos, chatt
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 75 6d 20 6f 6e 20 69 50 68 6f 6e 65 3f 22 2c 22 61 63 63 65 70 74 65 64 41 6e 73 77 65 72 22 3a 7b 22 40 74 79 70 65 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 65 78 74 22 3a 22 3c 62 3e 53 74 6f 72 6d 47 61 69 6e 3c 2f 62 3e 20 69 73 20 61 6e 20 45 74 68 65 72 65 75 6d 20 6d 69 6e 69 6e 67 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 74 68 61 74 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 6d 69 6e 65 20 64 69 67 69 74 61 6c 20 63 75 72 72 65 6e 63 69 65 73 20 77 69 74 68 6f 75 74 20 61 6e 79 20 68 61 73 73 6c 65 2e 20 49 74 20 70 72 6f 76 69 64 65 73 20 61 20 75 73 65 72 2d 66 72 69 65 6e 64 6c 79 20 64 61 73 68 62 6f 61 72 64 20 66 6f 72 20 76 69 65 77 69 6e 67 20 61 73 73 65 74 73 20 72 69 73 69 6e 67 20 61 6e 64 20 66 61 6c 6c 69 6e 67 2e 20 53 75 70 70 6f Data Ascii: um on iPhone?","acceptedAnswer":{"@type":"Answer","text":"<b>StormGain</b> is an Ethereum mining application that enables you to mine digital currencies without any hassle. It provides a user-friendly dashboard for viewing assets rising and falling. Suppo
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 6e 67 20 61 70 70 20 77 69 74 68 6f 75 74 20 69 6e 76 65 73 74 6d 65 6e 74 3f 22 2c 22 61 63 63 65 70 74 65 64 41 6e 73 77 65 72 22 3a 7b 22 40 74 79 70 65 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 65 78 74 22 3a 22 3c 62 3e 4c 69 62 65 72 74 65 78 3c 2f 62 3e 20 6f 66 66 65 72 73 20 69 74 73 20 75 73 65 72 73 20 74 68 65 20 75 6e 69 71 75 65 20 6f 70 70 6f 72 74 75 6e 69 74 79 20 74 6f 20 73 74 61 72 74 20 6d 69 6e 69 6e 67 20 42 69 74 63 6f 69 6e 20 61 74 20 68 6f 6d 65 20 61 6e 64 20 65 61 72 6e 20 72 65 77 61 72 64 73 20 77 69 74 68 20 7a 65 72 6f 20 72 69 73 6b 2e 20 54 68 65 20 4c 69 62 65 72 74 65 78 20 42 69 74 63 6f 69 6e 20 6d 69 6e 69 6e 67 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 66 72 65 65 20 61 6e 64 20 63 61 6e 20 72 75 6e 20 6f 6e 20 Data Ascii: ng app without investment?","acceptedAnswer":{"@type":"Answer","text":"<b>Libertex</b> offers its users the unique opportunity to start mining Bitcoin at home and earn rewards with zero risk. The Libertex Bitcoin mining application is free and can run on
2024-05-21 09:21:26 UTC	1369	IN	Data Raw: 43 6c 61 73 73 69 63 20 28 45 54 43 29 3c 2f 6c 69 3e 3c 6c 69 3e 23 37 29 20 42 69 74 63 6f 69 6e 20 47 6f 6c 64 2e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 64 69 76 3e 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 66 74 77 61 72 65 74 65 73 74 69 6e 67 68 65 6c 70 2e 63 6f 6d 2f 63 72 79 70 74 6f 63 75 72 72 65 6e 63 79 2d 74 6f 2d 6d 69 6e 65 2d 77 69 74 68 2d 67 70 75 2f 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 20 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 4d 6f 72 65 20 69 74 65 6d 73 2e 2e 2e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 4d 61 72 20 32 30 2c 20 32 30 32 33 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f Data Ascii: Classic (ETC)</li><li>#7) Bitcoin Gold.</li></ul><div><div><a href=\"https://www.softwaretestinghelp.com/cryptocurrency-to-mine-with-gpu/\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">More items...</a></div><div>Mar 20, 2023</div></div></div></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49736	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:26 UTC	602	OUT	GET /static-res/css/newsike.css?id=98d7a23ace76a572352b HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:27 UTC	636	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:27 GMT Content-Type: text/css Content-Length: 51764 Connection: close CF-Cache-Status: HIT Age: 6630 Last-Modified: Tue, 21 May 2024 07:30:56 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JlxPVBzjwClv%2Fjoq0ZVhwYYF%2B2aVx5oe9C%2FMuCLzdzKoJ4Hg8hNau2MoaN0WpVuuOMz7QqlGPDiy3r0FiSa46i7zD%2Bh4MtrlJs9%2FRcisnqzHusqyRi8c3dAW%2BfcjUfAleXjEbmiT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f0fbc5343b3-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:27 UTC	733	IN	Data Raw: 2f 2a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 32 2e 32 2e 37 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 2a 2f 2f 2a 21 20 6d 6f 64 65 72 6e 2d 6e 6f 72 6d 61 6c 69 7a 65 20 76 31 2e 31 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6e 64 72 65 73 6f 72 68 75 73 2f 6d 6f 64 65 72 6e 2d 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 6d 6f 7a 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 2d 6f 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 74 61 62 2d 73 69 7a 65 3a 34 7d 62 6f 64 Data Ascii: /! tailwindcss v2.2.7 \| MIT License \| https://tailwindcss.com//! modern-normalize v1.1.0 \| MIT License \| https://github.com/sindresorhus/modern-normalize /html{-webkit-text-size-adjust:100%;line-height:1.15;-moz-tab-size:4;-o-tab-size:4;tab-size:4}bod
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b Data Ascii: bottom:-.25em}sup{top:-.5em}table{border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webk
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 61 33 62 38 3b 6f 70 61 63 69 74 79 3a 31 7d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 61 33 62 38 3b 6f 70 61 63 69 74 79 3a 31 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 2c 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: -ms-input-placeholder,textarea:-ms-input-placeholder{color:#94a3b8;opacity:1}input::placeholder,textarea::placeholder{color:#94a3b8;opacity:1}[role=button],button{cursor:pointer}table{border-collapse:collapse}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weigh
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 68 75 65 2d 72 6f 74 61 74 65 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 69 6e 76 65 72 74 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 73 61 74 75 72 61 74 65 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 73 65 70 69 61 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 64 72 6f 70 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 66 69 6c 74 65 72 3a 76 61 72 28 2d 2d 74 77 2d 62 6c 75 Data Ascii: w-empty,/!/ /!/);--tw-hue-rotate:var(--tw-empty,/!/ /!/);--tw-invert:var(--tw-empty,/!/ /!/);--tw-saturate:var(--tw-empty,/!/ /!/);--tw-sepia:var(--tw-empty,/!/ /!/);--tw-drop-shadow:var(--tw-empty,/!/ /!/);--tw-filter:var(--tw-blu
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 29 20 30 20 30 20 30 20 63 61 6c 63 28 31 70 78 20 2b 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 36 33 65 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 73 68 61 64 6f 77 2c 30 20 30 20 23 30 30 30 30 29 3b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 7d 69 Data Ascii: shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);border-color:#2563eb;box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000);outline:2px solid transparent;outline-offset:2px}i
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 3a 23 36 34 37 34 38 62 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 32 35 36 33 65 62 3b 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 65 78 61 63 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 68 65 69 67 68 74 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 31 72 65 6d 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 62 6f 72 64 65 Data Ascii: :#64748b;border-width:1px;color:#2563eb;color-adjust:exact;display:inline-block;flex-shrink:0;height:1rem;padding:0;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;vertical-align:middle;width:1rem}[type=checkbox]{borde
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 74 66 2d 38 2c 25 33 43 73 76 67 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 63 69 72 63 6c 65 20 63 78 3d 27 38 27 20 63 79 3d 27 38 27 20 72 3d 27 33 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 64 3a 66 6f 63 75 73 2c 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 64 3a 68 6f 76 65 72 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 63 68 65 63 6b 65 64 3a 66 6f 63 75 73 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 63 68 65 63 6b 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: tf-8,%3Csvg viewBox='0 0 16 16' fill='%23fff' xmlns='http://www.w3.org/2000/svg'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E")}[type=checkbox]:checked:focus,[type=checkbox]:checked:hover,[type=radio]:checked:focus,[type=radio]:checked:hover{background-c
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 5d 7b 63 6f 6c 6f 72 3a 23 34 37 35 35 36 39 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 65 6d 7d 2e 70 72 6f 73 65 20 61 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 70 72 6f 73 65 20 73 74 72 6f 6e 67 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 70 72 6f 73 65 20 6f 6c 5b 74 79 70 65 3d 41 5d 7b 2d 2d 6c 69 73 74 2d 63 6f 75 6e 74 65 72 2d 73 74 79 6c 65 3a 75 70 70 65 72 2d 61 6c 70 68 61 7d 2e 70 72 6f 73 65 20 6f 6c Data Ascii: ]{color:#475569;font-size:1.25em;line-height:1.6;margin-bottom:1.2em;margin-top:1.2em}.prose a{color:#0f172a;font-weight:500;text-decoration:underline}.prose strong{color:#0f172a;font-weight:600}.prose ol[type=A]{--list-counter-style:upper-alpha}.prose ol
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 6f 70 65 6e 2d 71 75 6f 74 65 7d 2e 70 72 6f 73 65 20 62 6c 6f 63 6b 71 75 6f 74 65 20 70 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 63 6c 6f 73 65 2d 71 75 6f 74 65 7d 2e 70 72 6f 73 65 20 68 31 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 31 31 31 31 31 31 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 38 38 38 38 38 38 39 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 70 72 6f 73 65 20 68 32 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: :before{content:open-quote}.prose blockquote p:last-of-type:after{content:close-quote}.prose h1{color:#0f172a;font-size:2.25em;font-weight:800;line-height:1.1111111;margin-bottom:.8888889em;margin-top:0}.prose h2{color:#0f172a;font-size:1.5em;font-weight:
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 70 72 6f 73 65 20 74 68 65 61 64 20 74 68 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 37 31 34 32 38 36 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 37 31 34 32 38 36 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 37 31 34 32 38 36 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 70 72 6f 73 65 20 74 62 6f 64 79 20 74 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 65 32 65 38 66 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 7d 2e 70 72 6f 73 65 20 74 62 6f 64 79 20 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 Data Ascii: ottom-width:1px;color:#0f172a;font-weight:600}.prose thead th{padding-bottom:.5714286em;padding-left:.5714286em;padding-right:.5714286em;vertical-align:bottom}.prose tbody tr{border-bottom-color:#e2e8f0;border-bottom-width:1px}.prose tbody tr:last-child{b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49737	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:26 UTC	586	OUT	GET /static-res/js/newsike.js?id=2e2993cb3d75bb3492b1 HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:27 UTC	647	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:27 GMT Content-Type: application/javascript Content-Length: 21941 Connection: close CF-Cache-Status: HIT Age: 638 Last-Modified: Tue, 21 May 2024 09:10:49 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N1bhg9QlxInink2u%2Fmgd9hiWpXjMU685N6I9YVd8g1477ny%2BF17PvsZmbEeGwWoo0oziyz3rPtZYaHjx2LBtlbcF4KKo1eiUrEhNPh0a3e97%2Bm1PxwyU%2FW1bl%2B3xYxEHdLio5diy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f0fcee142e2-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:27 UTC	722	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 37 37 35 37 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 35 36 36 36 29 7d 2c 34 33 35 3a 28 74 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 62 61 6e 6e 65 72 49 64 73 3d 5b 22 41 64 48 65 61 64 65 72 22 2c 22 41 64 43 6f 6e 74 61 69 6e 65 72 22 2c 22 41 44 5f 54 6f 70 22 2c 22 68 6f 6d 65 61 64 22 2c 22 61 64 2d 6c 65 61 64 22 5d 2c 74 68 69 73 2e 69 6e 69 74 28 29 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b Data Ascii: (()=>{var t={7757:(t,e,n)=>{t.exports=n(5666)},435:(t,e)=>{"use strict";var n=function(){function t(){this.bannerIds=["AdHeader","AdContainer","AD_Top","homead","ad-lead"],this.init()}return t.prototype.init=function(){var t=document.createElement("div");
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 3d 6e 7c 7c 50 72 6f 6d 69 73 65 29 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 72 2e 6e 65 78 74 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 61 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 74 72 79 7b 63 28 72 2e 74 68 72 6f 77 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 61 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 65 3b 74 2e 64 6f 6e 65 3f 6f 28 74 2e 76 61 6c 75 65 29 3a 28 28 65 3d 74 2e 76 61 6c 75 65 29 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 65 3a 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 Data Ascii: t){"use strict";function e(t,e,n,r){return new(n=n\|\|Promise)((function(o,a){function i(t){try{c(r.next(t))}catch(t){a(t)}}function s(t){try{c(r.throw(t))}catch(t){a(t)}}function c(t){var e;t.done?o(t.value):((e=t.value)instanceof n?e:new n((function(t){t(
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 74 3d 21 31 2c 65 2e 6c 61 62 65 6c 3d 31 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 2e 74 72 79 73 2e 70 75 73 68 28 5b 31 2c 33 2c 2c 34 5d 29 2c 5b 34 2c 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 6a 73 2f 61 64 73 62 79 67 6f 6f 67 6c 65 2e 6a 73 22 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 65 2e 73 65 6e 74 28 29 2c 5b Data Ascii: ion(){return e(void 0,void 0,void 0,(function(){var t;return n(this,(function(e){switch(e.label){case 0:t=!1,e.label=1;case 1:return e.trys.push([1,3,,4]),[4,fetch("https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js")];case 2:return e.sent(),[
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 7d 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 65 28 21 31 29 7d 29 29 2e 63 61 74 63 68 28 28 74 3d 3e 7b 65 28 21 30 29 7d 29 29 7d 29 2c 74 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 2c 6e 2c 72 2c 6f 2c 61 2c 69 29 7b 74 72 79 7b 76 61 72 20 73 3d 74 5b 61 5d 28 69 29 2c 63 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 74 29 7d 73 2e 64 6f 6e 65 3f 65 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 Data Ascii: de:"no-cors"}).then((()=>{e(!1)})).catch((t=>{e(!0)}))}),t)}))}function l(t,e,n,r,o,a,i){try{var s=t[a](i),c=s.value}catch(t){return void n(t)}s.done?e(c):Promise.resolve(c).then(r,o)}function d(t){return function(){var e=this,n=arguments;return new Promi
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 74 2e 70 72 65 76 3d 74 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 32 2c 75 28 29 3b 63 61 73 65 20 32 3a 74 2e 73 65 6e 74 26 26 66 28 29 3b 63 61 73 65 20 34 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 74 2e 73 74 6f 70 28 29 7d 7d 29 2c 74 29 7d 29 29 29 28 29 7d 2c 38 39 36 37 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 65 29 3b 6e 28 37 30 39 30 29 3b 77 69 6e 64 6f 77 2e 6f 6e 49 6d 61 67 65 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3f 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3a 74 2e 73 72 63 3d 22 2f 69 6d 67 Data Ascii: ().wrap((function(t){for(;;)switch(t.prev=t.next){case 0:return t.next=2,u();case 2:t.sent&&f();case 4:case"end":return t.stop()}}),t)})))()},8967:(t,e,n)=>{"use strict";n.r(e);n(7090);window.onImageError=function(t,e){e?t.style.display="none":t.src="/img
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 74 6f 70 3a 20 2d 31 30 30 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 22 29 2c 74 7d 28 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 7c 7c 30 3d 3d 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 30 3d 3d 74 2e 6f 66 66 73 65 74 4c 65 66 74 7c 7c 30 3d 3d 74 2e 6f 66 66 73 65 74 54 6f 70 7c 7c 30 3d 3d 74 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 30 3d 3d 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 30 3d 3d 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 72 65 74 75 72 6e 21 30 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d Data Ascii: 0px !important; top: -1000px !important;"),t}();window.document.body.appendChild(t);var e=function(t){if(null===t.offsetParent\|\|0==t.offsetHeight\|\|0==t.offsetLeft\|\|0==t.offsetTop\|\|0==t.offsetWidth\|\|0==t.clientHeight\|\|0==t.clientWidth)return!0;if(void 0!==
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 76 61 72 20 72 2c 6f 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 3d 7b 6c 61 7a 79 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 22 2c 6c 6f 61 64 65 64 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 65 64 22 2c 6c 6f 61 64 69 6e 67 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 69 6e 67 22 2c 70 72 65 6c 6f 61 64 43 6c 61 73 73 3a 22 6c 61 7a 79 70 72 65 6c 6f 61 64 22 2c 65 72 72 6f 72 43 6c 61 73 73 3a 22 6c 61 7a 79 65 72 72 6f 72 22 2c 61 75 74 6f 73 69 7a 65 73 43 6c 61 73 73 3a 22 6c 61 7a 79 61 75 74 6f 73 69 7a 65 73 22 2c 66 61 73 74 4c 6f 61 64 65 64 43 6c 61 73 73 3a 22 6c 73 2d 69 73 2d 63 61 63 68 65 64 22 2c 69 66 72 61 6d 65 4c 6f 61 64 4d 6f 64 65 3a 30 2c 73 72 63 41 74 74 72 3a 22 64 61 74 61 2d 73 72 63 22 2c 73 72 63 Data Ascii: var r,o;if(function(){var e,n={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:0,srcAttr:"data-src",src
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 3d 74 2e 70 69 63 74 75 72 65 66 69 6c 6c 7c 7c 6f 2e 70 66 29 3f 28 6e 26 26 6e 2e 73 72 63 26 26 21 65 5b 63 5d 28 22 73 72 63 73 65 74 22 29 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 73 65 74 22 2c 6e 2e 73 72 63 29 2c 72 28 7b 72 65 65 76 61 6c 75 61 74 65 3a 21 30 2c 65 6c 65 6d 65 6e 74 73 3a 5b 65 5d 7d 29 29 3a 6e 26 26 6e 2e 73 72 63 26 26 28 65 2e 73 72 63 3d 6e 2e 73 72 63 29 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 2c 6e 75 6c 6c 29 7c 7c 7b 7d 29 5b 65 5d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 6e 3d 6e 7c 7c 74 2e 6f 66 66 73 65 74 57 69 64 74 68 3b 6e 3c 6f 2e 6d 69 6e 53 69 7a 65 26 26 65 26 26 21 74 Data Ascii: =t.picturefill\|\|o.pf)?(n&&n.src&&!e[c]("srcset")&&e.setAttribute("srcset",n.src),r({reevaluate:!0,elements:[e]})):n&&n.src&&(e.src=n.src)},_=function(t,e){return(getComputedStyle(t,null)\|\|{})[e]},E=function(t,e,n){for(n=n\|\|t.offsetWidth;n<o.minSize&&e&&!t
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 6c 69 74 79 22 29 29 7d 2c 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 74 2c 69 3d 6e 74 28 74 29 3b 66 6f 72 28 47 2d 3d 6e 2c 56 2b 3d 6e 2c 24 2d 3d 6e 2c 71 2b 3d 6e 3b 69 26 26 28 6f 3d 6f 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 29 26 26 6f 21 3d 65 2e 62 6f 64 79 26 26 6f 21 3d 61 3b 29 28 69 3d 28 5f 28 6f 2c 22 6f 70 61 63 69 74 79 22 29 7c 7c 31 29 3e 30 29 26 26 22 76 69 73 69 62 6c 65 22 21 3d 5f 28 6f 2c 22 6f 76 65 72 66 6c 6f 77 22 29 26 26 28 72 3d 6f 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 69 3d 71 3e 72 2e 6c 65 66 74 26 26 24 3c 72 2e 72 69 67 68 74 26 26 56 3e 72 2e 74 6f 70 2d 31 26 26 47 3c 72 2e 62 6f 74 74 6f 6d 2b 31 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6f 74 3d 66 75 Data Ascii: lity"))},rt=function(t,n){var r,o=t,i=nt(t);for(G-=n,V+=n,$-=n,q+=n;i&&(o=o.offsetParent)&&o!=e.body&&o!=a;)(i=(_(o,"opacity")\|\|1)>0)&&"visible"!=_(o,"overflow")&&(r=o.getBoundingClientRect(),i=q>r.left&&$<r.right&&V>r.top-1&&G<r.bottom+1);return i},ot=fu
2024-05-21 09:21:27 UTC	1369	IN	Data Raw: 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 65 29 3a 31 3d 3d 6e 26 26 28 74 2e 73 72 63 3d 65 29 7d 2c 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 74 5b 63 5d 28 6f 2e 73 72 63 73 65 74 41 74 74 72 29 3b 28 65 3d 6f 2e 63 75 73 74 6f 6d 4d 65 64 69 61 5b 74 5b 63 5d 28 22 64 61 74 61 2d 6d 65 64 69 61 22 29 7c 7c 74 5b 63 5d 28 22 6d 65 64 69 61 22 29 5d 29 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 2c 65 29 2c 6e 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 73 65 74 22 2c 6e 29 7d 2c 64 74 3d 43 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 61 29 7b 76 61 72 20 69 2c 73 2c 75 2c 64 2c 66 2c 70 3b 28 66 3d 78 28 74 2c 22 6c 61 7a 79 62 65 66 6f Data Ascii: Window.location.replace(e):1==n&&(t.src=e)},lt=function(t){var e,n=t[c](o.srcsetAttr);(e=o.customMedia[t[c]("data-media")\|\|t[c]("media")])&&t.setAttribute("media",e),n&&t.setAttribute("srcset",n)},dt=C((function(t,e,n,r,a){var i,s,u,d,f,p;(f=x(t,"lazybefo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49739	185.3.92.76	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:27 UTC	562	OUT	GET /site/0/e/f234e7-fc25-4181-9fdc-65d9171ace67.js HTTP/1.1 Host: monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:27 UTC	671	IN	HTTP/1.1 200 OK server: nginx date: Tue, 21 May 2024 09:21:27 GMT content-type: application/javascript transfer-encoding: chunked vary: Accept-Encoding x-goog-generation: 1716268402090293 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 62026 x-goog-hash: crc32c=1WtEIg== x-goog-hash: md5=I0Iv+RKztfMGMjPVkNxe8Q== x-goog-storage-class: STANDARD accept-ranges: bytes x-guploader-uploadid: ABPtcPqSePmuMWzgh7KYZVpAhQ7VmVZ1ipcs0QrlOis_bxAZxeu1kRSE-jHDbeWszBUm5mm-tqg expires: Tue, 21 May 2024 11:21:27 GMT cache-control: max-age=7200 age: 0 x-cache: MISS access-control-allow-origin: * connection: close
2024-05-21 09:21:27 UTC	6571	IN	Data Raw: 31 39 41 33 0d 0a 76 61 72 20 24 4d 4d 54 20 3d 20 24 4d 4d 54 20 7c 7c 20 7b 7d 3b 20 24 4d 4d 54 2e 63 6d 64 20 3d 20 24 4d 4d 54 2e 63 6d 64 20 7c 7c 20 5b 5d 3b 20 24 4d 4d 54 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3d 20 7b 22 75 73 65 72 5f 67 65 6f 73 22 3a 20 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 59 22 2c 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 20 22 6c 61 74 22 3a 20 34 30 2e 37 31 32 33 30 2c 20 22 6c 6f 6e 22 3a 20 2d 37 34 2e 30 30 36 38 30 2c 20 22 74 79 70 65 22 3a 20 32 2c 20 22 61 63 63 75 72 61 63 79 22 3a 20 32 30 2c 20 22 69 70 73 65 72 76 69 63 65 22 3a 20 33 2c 20 22 6d 65 74 Data Ascii: 19A3var $MMT = $MMT \|\| {}; $MMT.cmd = $MMT.cmd \|\| []; $MMT.configuration = {"user_geos": {"geo":{"ip":"8.46.123.175", "city": "New York", "region": "NY", "country": "US", "lat": 40.71230, "lon": -74.00680, "type": 2, "accuracy": 20, "ipservice": 3, "met
2024-05-21 09:21:27 UTC	7248	IN	Data Raw: 31 43 34 38 0d 0a 31 2c 20 22 6d 61 78 52 65 71 75 65 73 74 73 22 3a 20 31 2c 20 22 68 65 69 67 68 74 22 3a 20 30 2c 20 22 77 69 64 74 68 22 3a 20 30 2c 20 22 67 61 70 22 3a 20 30 2c 20 22 66 69 6c 6c 43 6f 6c 75 6d 6e 73 22 3a 20 74 72 75 65 2c 20 22 73 65 74 44 69 76 57 69 64 74 68 22 3a 20 66 61 6c 73 65 2c 20 22 63 6f 6c 6c 61 70 73 65 48 65 69 67 68 74 22 3a 20 66 61 6c 73 65 2c 20 22 6c 6f 61 64 69 6e 67 54 79 70 65 22 3a 20 22 64 79 6e 61 6d 69 63 22 2c 20 22 6c 61 79 6f 75 74 22 3a 20 5b 5d 7d 7d 2c 20 22 65 6e 61 62 6c 65 64 22 3a 20 66 61 6c 73 65 7d 2c 20 22 73 68 61 64 6f 77 42 6f 78 22 3a 20 7b 22 64 65 76 69 63 65 73 22 3a 20 7b 22 6d 6f 62 69 6c 65 22 3a 20 7b 22 65 6e 61 62 6c 65 64 22 3a 20 66 61 6c 73 65 2c 20 22 73 69 7a 65 22 3a 20 31 Data Ascii: 1C481, "maxRequests": 1, "height": 0, "width": 0, "gap": 0, "fillColumns": true, "setDivWidth": false, "collapseHeight": false, "loadingType": "dynamic", "layout": []}}, "enabled": false}, "shadowBox": {"devices": {"mobile": {"enabled": false, "size": 1
2024-05-21 09:21:27 UTC	13499	IN	Data Raw: 33 34 42 33 0d 0a 6e 65 42 72 65 61 6b 22 3a 20 22 22 2c 20 22 73 68 6f 77 41 64 76 65 72 74 69 73 65 6d 65 6e 74 22 3a 20 6e 75 6c 6c 2c 20 22 70 6f 73 69 74 69 6f 6e 69 6e 67 22 3a 20 22 63 65 6e 74 65 72 22 2c 20 22 73 74 69 63 6b 79 22 3a 20 7b 22 65 6e 61 62 6c 65 64 22 3a 20 66 61 6c 73 65 2c 20 22 65 6e 61 62 6c 65 43 6c 6f 73 65 42 75 74 74 6f 6e 22 3a 20 66 61 6c 73 65 2c 20 22 63 6c 6f 73 65 42 75 74 74 6f 6e 42 65 68 61 76 69 6f 72 22 3a 20 22 61 6c 77 61 79 73 22 2c 20 22 74 79 70 65 22 3a 20 22 22 2c 20 22 64 65 76 69 63 65 73 22 3a 20 5b 22 64 65 73 6b 74 6f 70 22 2c 20 22 74 61 62 6c 65 74 22 2c 20 22 6d 6f 62 69 6c 65 22 5d 2c 20 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 20 7b 22 65 6c 4f 66 66 73 65 74 22 3a 20 22 22 2c 20 22 70 61 Data Ascii: 34B3neBreak": "", "showAdvertisement": null, "positioning": "center", "sticky": {"enabled": false, "enableCloseButton": false, "closeButtonBehavior": "always", "type": "", "devices": ["desktop", "tablet", "mobile"], "configuration": {"elOffset": "", "pa
2024-05-21 09:21:27 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 4d 4d 54 2e 64 73 6c 6f 61 64 65 64 29 72 65 74 75 72 6e 20 76 6f 69 64 20 24 4d 4d 54 2e 64 73 6c 6f 61 64 65 64 2b 2b 3b 24 4d 4d 54 2e 64 73 6c 6f 61 64 65 64 3d 31 2c 24 4d 4d 54 2e 6c 6f 67 53 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 33 70 78 22 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 25 63 4d 4d 54 22 2c 24 4d 4d 54 2e 6c 6f 67 53 74 79 6c 65 2c 22 53 43 52 49 50 54 20 31 20 43 4f 52 45 22 29 3b 63 6f 6e 73 74 20 74 3d 24 4d 4d 54 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 65 3d 7b 64 65 76 69 63 65 54 79 70 65 3a 6e 75 6c 6c 2c 61 64 54 61 67 Data Ascii: 3FBA!function(){if($MMT.dsloaded)return void $MMT.dsloaded++;$MMT.dsloaded=1,$MMT.logStyle="background-color:#dddddd; border-radius:3px;padding:0 3px",console.log("%cMMT",$MMT.logStyle,"SCRIPT 1 CORE");const t=$MMT.configuration,e={deviceType:null,adTag
2024-05-21 09:21:27 UTC	12648	IN	Data Raw: 33 31 36 30 0d 0a 61 67 4d 61 6e 61 67 65 72 2e 64 69 73 70 6c 61 79 41 64 73 45 6e 61 62 6c 65 64 28 29 7c 7c 28 74 68 69 73 2e 64 67 2e 73 65 74 49 6e 61 63 74 69 76 65 53 74 61 74 75 73 28 22 44 69 73 70 6c 61 79 20 61 64 73 20 64 69 73 61 62 6c 65 64 22 29 2c 74 3d 21 30 29 2c 74 68 69 73 2e 69 73 41 63 74 69 76 65 28 29 26 26 21 74 68 69 73 2e 65 78 63 6c 75 64 65 64 42 79 57 68 69 74 65 6c 69 73 74 28 29 7c 7c 28 74 3d 21 30 29 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 65 78 63 6c 75 64 65 64 42 79 53 65 6c 65 63 74 6f 72 28 29 3b 69 66 28 69 29 74 3d 21 30 3b 65 6c 73 65 20 69 66 28 21 74 26 26 30 3d 3d 3d 69 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 74 7c 7c 28 74 68 69 73 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 21 31 29 7d 2c 69 2e 70 72 Data Ascii: 3160agManager.displayAdsEnabled()\|\|(this.dg.seuserctiveStatus("Display ads disabled"),t=!0),this.isActive()&&!this.excludedByWhitelist()\|\|(t=!0);const i=this.excludedBySelector();if(i)t=!0;else if(!t&&0===i)return!1;return!t\|\|(this.disabled=!0,!1)},i.pr
2024-05-21 09:21:27 UTC	6226	IN	Data Raw: 31 38 34 35 0d 0a 2e 69 6e 63 6c 75 64 65 73 28 22 20 22 29 26 26 28 69 3d 69 2e 6d 61 74 63 68 28 2f 5c 62 5c 77 2f 67 29 2e 6a 6f 69 6e 28 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 72 3d 6e 2b 22 3f 73 3d 22 2b 65 2e 61 6e 61 6c 79 74 69 63 73 2e 73 65 73 73 69 6f 6e 2b 22 26 61 3d 22 2b 69 2b 22 26 75 3d 22 2b 6f 2b 28 73 3f 22 26 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 29 3a 22 22 29 3b 61 26 26 65 2e 64 67 2e 6c 6f 67 28 5b 22 41 6e 61 6c 79 74 69 63 73 20 63 61 6c 6c 3a 20 22 2c 72 5d 2c 5b 22 6d 61 69 6e 22 5d 29 3b 72 65 74 75 72 6e 20 72 7d 28 74 29 3b 69 26 26 72 28 69 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 66 75 6e 63 74 69 6f Data Ascii: 1845.includes(" ")&&(i=i.match(/\b\w/g).join(".").toLowerCase());const r=n+"?s="+e.analytics.session+"&a="+i+"&u="+o+(s?"&d="+encodeURIComponent(JSON.stringify(s)):"");a&&e.dg.log(["Analytics call: ",r],["main"]);return r}(t);i&&r(i,false,false)}functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49741	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:29 UTC	550	OUT	HEAD /?adlocation= HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:29 UTC	657	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:29 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: immutable, max-age=31536000, public CF-Cache-Status: HIT Age: 275376 Last-Modified: Sat, 18 May 2024 04:51:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7X%2FiHdAnVCQTomil9nUfbZmQQR1Uax5DuXeb3wng7MSNtmmJuGVZuX0ejpklOrN2LKmV5Kek%2FDvFs704T14Ehfq6rg4sEmwQE1jWX5B%2Fw%2B9TiGp7kgb5IfzGpxBGRsotEirLErv1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f1eb9294356-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49744	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:29 UTC	647	OUT	GET /static-res/img/search.svg?id=b28071f3b9c4778b36f1 HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:29 UTC	636	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:29 GMT Content-Type: image/svg+xml Content-Length: 219 Connection: close CF-Cache-Status: HIT Age: 799 Last-Modified: Tue, 21 May 2024 09:08:10 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y9y6LEaaNFJu%2FYZyL8WuwT8a1OlsPabh9Fiq%2BB687R6ydTR14OYq%2FmGCGeReAuB3q9gq5NrWri5KX53HvkJ8W8Sds9H30jjAfl9h3PZ5dvs%2BknVJwdcxrmPYQcjVXZMbrq%2FM8K8G"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f1ea8840f36-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:29 UTC	219	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 73 74 72 6f 6b 65 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 33 22 20 64 3d 22 4d 32 31 20 32 31 6c 2d 36 2d 36 6d 32 2d 35 61 37 20 37 20 30 20 31 31 2d 31 34 20 30 20 37 20 37 20 30 20 30 31 31 34 20 30 7a 22 20 2f 3e 0a 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="white"> <path stroke-linecap="round" stroke-linejoin="round" stroke-width="3" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z" /></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49742	185.3.92.76	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:29 UTC	575	OUT	GET /assets/scripts/vendors/xdomain/1.0.8a/xdomain_cookie.min.js HTTP/1.1 Host: monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:29 UTC	736	IN	HTTP/1.1 200 OK server: nginx date: Tue, 21 May 2024 09:21:29 GMT content-type: application/javascript content-length: 4733 vary: Accept-Encoding x-goog-generation: 1598340963244234 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 4733 x-goog-hash: crc32c=PYpHKQ== x-goog-hash: md5=thaqbm5dIRiPqROaEv/m/g== x-goog-storage-class: STANDARD x-guploader-uploadid: ABPtcPr-KhI5Sznx91iAZGif0wbE0HR-cdHbT5QRAS11kYOYQxO-dwZWEH-LCZNhunUwjKMZm1E expires: Fri, 16 May 2025 09:21:29 GMT cache-control: max-age=31104000 last-modified: Tue, 25 Aug 2020 07:36:03 GMT age: 0 cache-control: public x-cache: HIT access-control-allow-origin: * accept-ranges: bytes connection: close
2024-05-21 09:21:29 UTC	4733	IN	Data Raw: 2f 2a 20 56 65 72 73 69 6f 6e 20 31 2e 30 2e 38 20 78 64 6f 6d 61 69 6e 2d 63 6f 6f 6b 69 65 73 20 28 68 74 74 70 3a 2f 2f 63 6f 6e 74 65 6e 74 6c 79 2e 67 69 74 68 75 62 2e 69 6f 2f 78 64 6f 6d 61 69 6e 2d 63 6f 6f 6b 69 65 73 2f 29 20 66 72 6f 6d 20 43 6f 6e 74 65 6e 74 6c 79 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 6c 79 29 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 44 6f 6d 61 69 6e 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 69 66 72 61 6d 65 5f 70 61 74 68 2c 6e 61 6d 65 73 70 61 63 65 2c 78 64 6f 6d 61 69 6e 5f 6f 6e 6c 79 2c 69 66 72 61 6d 65 5f 6c 6f 61 64 5f 74 69 6d 65 6f 75 74 5f 6d 73 2c 73 65 63 75 72 65 5f 6f 6e Data Ascii: /* Version 1.0.8 xdomain-cookies (http://contently.github.io/xdomain-cookies/) from Contently (https://github.com/contently) */!function(exports){"use strict";var xDomainCookie=function(iframe_path,namespace,xdomain_only,iframe_load_timeout_ms,secure_on

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49743	185.3.92.76	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:29 UTC	587	OUT	GET /sitesplit/d3/smartzones/0.5.5/0/e/f234e7-fc25-4181-9fdc-65d9171ace67.js HTTP/1.1 Host: monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:29 UTC	672	IN	HTTP/1.1 200 OK server: nginx date: Tue, 21 May 2024 09:21:29 GMT content-type: application/javascript transfer-encoding: chunked vary: Accept-Encoding x-goog-generation: 1716268405489549 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 679366 x-goog-hash: crc32c=+urX/w== x-goog-hash: md5=AGoQfpmU6G8kdonbqKq+Pg== x-goog-storage-class: STANDARD accept-ranges: bytes x-guploader-uploadid: ABPtcPohuP6cLeApK51qOeGH2vMYlwPnktI8dE3KiPeDeVf3lGLW3eyc1SsNb-ZzhSiagUQC1EY expires: Tue, 21 May 2024 11:21:29 GMT cache-control: max-age=7200 age: 0 x-cache: MISS access-control-allow-origin: * connection: close
2024-05-21 09:21:29 UTC	13809	IN	Data Raw: 33 35 45 39 0d 0a 76 61 72 20 24 4d 4d 54 20 3d 20 24 4d 4d 54 20 7c 7c 20 7b 7d 3b 20 24 4d 4d 54 2e 63 6d 64 20 3d 20 24 4d 4d 54 2e 63 6d 64 20 7c 7c 20 5b 5d 3b 20 24 4d 4d 54 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3d 20 7b 22 75 73 65 72 5f 67 65 6f 73 22 3a 20 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 59 22 2c 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 20 22 6c 61 74 22 3a 20 34 30 2e 37 31 32 33 30 2c 20 22 6c 6f 6e 22 3a 20 2d 37 34 2e 30 30 36 38 30 2c 20 22 74 79 70 65 22 3a 20 32 2c 20 22 61 63 63 75 72 61 63 79 22 3a 20 32 30 2c 20 22 69 70 73 65 72 76 69 63 65 22 3a 20 33 2c 20 22 6d 65 74 Data Ascii: 35E9var $MMT = $MMT \|\| {}; $MMT.cmd = $MMT.cmd \|\| []; $MMT.configuration = {"user_geos": {"geo":{"ip":"8.46.123.175", "city": "New York", "region": "NY", "country": "US", "lat": 40.71230, "lon": -74.00680, "type": 2, "accuracy": 20, "ipservice": 3, "met
2024-05-21 09:21:29 UTC	10144	IN	Data Raw: 32 37 39 38 0d 0a 20 6e 75 6c 6c 2c 20 22 6d 6f 62 69 6c 65 22 3a 20 6e 75 6c 6c 7d 2c 20 22 61 64 58 46 6c 6f 6f 72 22 3a 20 7b 22 64 65 73 6b 74 6f 70 22 3a 20 22 30 2e 31 35 22 2c 20 22 74 61 62 6c 65 74 22 3a 20 22 30 2e 31 35 22 2c 20 22 6d 6f 62 69 6c 65 22 3a 20 22 30 2e 31 35 22 7d 2c 20 22 73 46 6c 6f 6f 72 22 3a 20 7b 22 64 65 73 6b 74 6f 70 22 3a 20 7b 22 6f 74 68 65 72 22 3a 20 7b 22 74 31 22 3a 20 30 2c 20 22 74 32 22 3a 20 30 2c 20 22 74 33 22 3a 20 30 2c 20 22 74 34 22 3a 20 30 7d 2c 20 22 63 68 72 6f 6d 65 22 3a 20 7b 22 74 31 22 3a 20 30 2c 20 22 74 32 22 3a 20 30 2c 20 22 74 33 22 3a 20 30 2c 20 22 74 34 22 3a 20 30 7d 7d 2c 20 22 74 61 62 6c 65 74 22 3a 20 7b 22 6f 74 68 65 72 22 3a 20 7b 22 74 31 22 3a 20 30 2c 20 22 74 32 22 3a 20 30 Data Ascii: 2798 null, "mobile": null}, "adXFloor": {"desktop": "0.15", "tablet": "0.15", "mobile": "0.15"}, "sFloor": {"desktop": {"other": {"t1": 0, "t2": 0, "t3": 0, "t4": 0}, "chrome": {"t1": 0, "t2": 0, "t3": 0, "t4": 0}}, "tablet": {"other": {"t1": 0, "t2": 0
2024-05-21 09:21:29 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 74 61 67 22 2c 20 22 70 61 72 61 6d 73 22 3a 20 7b 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 20 22 35 32 36 31 2d 32 32 39 36 2d 30 31 22 2c 20 22 61 64 55 6e 69 74 49 64 22 3a 20 22 33 32 30 37 33 37 30 38 22 2c 20 22 70 6c 61 63 65 6d 65 6e 74 22 3a 20 22 69 6e 53 63 72 65 65 6e 22 7d 7d 2c 20 7b 22 62 69 64 64 65 72 22 3a 20 22 73 6f 6e 6f 62 69 22 2c 20 22 70 61 72 61 6d 73 22 3a 20 7b 22 70 6c 61 63 65 6d 65 6e 74 5f 69 64 22 3a 20 22 61 65 34 64 36 34 65 38 62 66 36 37 33 37 66 30 38 61 62 36 22 2c 20 22 73 69 7a 65 22 3a 20 22 33 32 30 78 35 30 22 7d 7d 2c 20 7b 22 62 69 64 64 65 72 22 3a 20 22 74 72 69 70 6c 65 6c 69 66 74 22 2c 20 22 70 61 72 61 6d 73 22 3a 20 7b 22 69 6e 76 65 6e 74 6f 72 79 43 6f 64 65 22 3a 20 22 4d 6f 6e 75 Data Ascii: 3FC0tag", "params": {"publisherId": "5261-2296-01", "adUnitId": "32073708", "placement": "inScreen"}}, {"bidder": "sonobi", "params": {"placement_id": "ae4d64e8bf6737f08ab6", "size": "320x50"}}, {"bidder": "triplelift", "params": {"inventoryCode": "Monu
2024-05-21 09:21:29 UTC	2511	IN	Data Raw: 39 43 38 0d 0a 22 64 65 73 6b 74 6f 70 22 2c 20 22 74 61 62 6c 65 74 22 5d 2c 20 22 72 65 66 72 65 73 68 22 3a 20 7b 22 65 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 20 22 69 6e 74 65 72 76 61 6c 22 3a 20 33 30 2c 20 22 63 61 70 22 3a 20 32 30 30 2c 20 22 64 65 76 69 63 65 73 22 3a 20 5b 22 64 65 73 6b 74 6f 70 22 2c 20 22 74 61 62 6c 65 74 22 2c 20 22 6d 6f 62 69 6c 65 22 5d 2c 20 22 69 73 4d 61 6e 75 61 6c 22 3a 20 66 61 6c 73 65 2c 20 22 75 73 65 43 75 74 6f 66 66 22 3a 20 66 61 6c 73 65 2c 20 22 63 6f 6d 6d 6f 6e 43 75 74 6f 66 66 22 3a 20 66 61 6c 73 65 2c 20 22 72 65 66 72 65 73 68 41 66 74 65 72 43 6c 6f 73 65 22 3a 20 66 61 6c 73 65 2c 20 22 65 61 72 6c 79 49 6e 74 65 72 76 61 6c 22 3a 20 6e 75 6c 6c 2c 20 22 63 75 74 6f 66 66 43 6f 75 6e 74 22 3a Data Ascii: 9C8"desktop", "tablet"], "refresh": {"enabled": true, "interval": 30, "cap": 200, "devices": ["desktop", "tablet", "mobile"], "isManual": false, "useCutoff": false, "commonCutoff": false, "refreshAfterClose": false, "earlyInterval": null, "cutoffCount":
2024-05-21 09:21:30 UTC	7248	IN	Data Raw: 31 43 34 38 0d 0a 37 30 64 35 38 62 62 22 2c 20 22 70 49 64 22 3a 20 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 7d 7d 2c 20 7b 22 62 69 64 64 65 72 22 3a 20 22 6d 65 64 69 61 6e 65 74 22 2c 20 22 70 61 72 61 6d 73 22 3a 20 7b 22 63 69 64 22 3a 20 22 38 43 55 57 57 47 37 4f 4b 22 2c 20 22 63 72 69 64 22 3a 20 22 34 35 38 30 36 33 37 34 32 22 2c 20 22 73 69 7a 65 22 3a 20 22 33 30 30 78 32 35 30 22 7d 7d 2c 20 7b 22 62 69 64 64 65 72 22 3a 20 22 6d 65 64 69 61 6e 65 74 22 2c 20 22 70 61 72 61 6d 73 22 3a 20 7b 22 63 69 64 22 3a 20 22 38 43 55 57 57 47 37 4f 4b 22 2c 20 22 63 72 69 64 22 3a 20 22 38 35 36 36 31 32 37 31 36 22 2c 20 22 73 69 7a 65 22 3a 20 22 31 36 30 78 36 30 30 22 7d 7d 2c 20 7b 22 62 69 64 64 65 72 22 3a 20 Data Ascii: 1C4870d58bb", "pId": "65lk7c192882r0011813fn9"}}, {"bidder": "medianet", "params": {"cid": "8CUWWG7OK", "crid": "458063742", "size": "300x250"}}, {"bidder": "medianet", "params": {"cid": "8CUWWG7OK", "crid": "856612716", "size": "160x600"}}, {"bidder":
2024-05-21 09:21:30 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 79 73 22 2c 20 22 74 79 70 65 22 3a 20 22 22 2c 20 22 64 65 76 69 63 65 73 22 3a 20 5b 22 64 65 73 6b 74 6f 70 22 2c 20 22 74 61 62 6c 65 74 22 2c 20 22 6d 6f 62 69 6c 65 22 5d 2c 20 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 20 7b 22 65 6c 4f 66 66 73 65 74 22 3a 20 22 22 2c 20 22 70 61 67 65 46 6f 6f 74 65 72 45 6c 43 6c 61 73 73 22 3a 20 22 22 2c 20 22 73 74 69 63 6b 54 69 6d 65 22 3a 20 22 30 22 2c 20 22 73 74 69 63 6b 53 69 64 65 22 3a 20 22 6c 65 66 74 22 7d 2c 20 22 70 69 6c 6c 61 72 50 6f 73 69 74 69 6f 6e 22 3a 20 7b 7d 7d 2c 20 22 66 6c 6f 6f 72 54 79 70 65 22 3a 20 7b 22 64 65 73 6b 74 6f 70 22 3a 20 22 73 69 74 65 22 2c 20 22 74 61 62 6c 65 74 22 3a 20 22 73 69 74 65 22 2c 20 22 6d 6f 62 69 6c 65 22 3a 20 22 73 69 74 65 Data Ascii: 3FC0ys", "type": "", "devices": ["desktop", "tablet", "mobile"], "configuration": {"elOffset": "", "pageFooterElClass": "", "stickTime": "0", "stickSide": "left"}, "pillarPosition": {}}, "floorType": {"desktop": "site", "tablet": "site", "mobile": "site
2024-05-21 09:21:30 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 69 64 64 65 72 22 3a 20 22 76 69 64 61 7a 6f 6f 22 2c 20 22 70 61 72 61 6d 73 22 3a 20 7b 22 63 49 64 22 3a 20 22 36 33 37 65 36 35 34 36 64 65 63 62 38 32 64 34 35 32 33 36 66 30 66 38 22 2c 20 22 70 49 64 22 3a 20 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 7d 7d 5d 2c 20 22 73 65 74 75 70 42 69 64 64 65 72 43 6f 6e 66 69 67 22 3a 20 5b 5d 2c 20 22 67 65 6f 42 69 64 64 65 72 73 22 3a 20 7b 7d 7d 2c 20 22 64 65 73 6b 74 6f 70 22 3a 20 7b 22 73 63 72 69 70 74 42 69 64 64 65 72 73 22 3a 20 5b 5d 2c 20 22 70 72 65 62 69 64 42 69 64 64 65 72 73 22 3a 20 5b 7b 22 62 69 64 64 65 72 22 3a 20 22 61 64 79 6f 75 6c 69 6b 65 22 2c 20 22 70 61 72 61 6d 73 22 3a 20 7b 22 70 6c 61 63 65 6d 65 6e 74 22 3a 20 22 66 66 Data Ascii: 3FC0idder": "vidazoo", "params": {"cId": "637e6546decb82d45236f0f8", "pId": "59ac17c192832d0011283fe3"}}], "setupBidderConfig": [], "geoBidders": {}}, "desktop": {"scriptBidders": [], "prebidBidders": [{"bidder": "adyoulike", "params": {"placement": "ff
2024-05-21 09:21:30 UTC	14308	IN	Data Raw: 33 37 44 43 0d 0a 22 2c 20 22 63 77 37 7a 6c 73 22 3a 20 22 30 2e 33 32 22 2c 20 22 31 63 65 73 30 6c 63 22 3a 20 22 30 2e 33 33 22 2c 20 22 75 6e 69 30 33 6b 22 3a 20 22 30 2e 33 34 22 2c 20 22 31 75 36 32 31 33 34 22 3a 20 22 30 2e 33 35 22 2c 20 22 34 30 6b 7a 63 77 22 3a 20 22 30 2e 33 36 22 2c 20 22 31 33 6a 35 30 63 67 22 3a 20 22 30 2e 33 37 22 2c 20 22 6c 72 75 7a 75 6f 22 3a 20 22 30 2e 33 38 22 2c 20 22 31 6c 61 66 30 75 38 22 3a 20 22 30 2e 33 39 22 2c 20 22 68 63 31 68 71 38 22 3a 20 22 30 2e 34 30 22 2c 20 22 31 67 75 6c 69 70 73 22 3a 20 22 30 2e 34 31 22 2c 20 22 7a 33 62 69 38 30 22 3a 20 22 30 2e 34 32 22 2c 20 22 31 79 6c 76 6a 37 6b 22 3a 20 22 30 2e 34 33 22 2c 20 22 38 67 65 68 68 63 22 3a 20 22 30 2e 34 34 22 2c 20 22 31 37 79 79 69 Data Ascii: 37DC", "cw7zls": "0.32", "1ces0lc": "0.33", "uni03k": "0.34", "1u62134": "0.35", "40kzcw": "0.36", "13j50cg": "0.37", "lruzuo": "0.38", "1laf0u8": "0.39", "hc1hq8": "0.40", "1gulips": "0.41", "z3bi80": "0.42", "1ylvj7k": "0.43", "8gehhc": "0.44", "17yyi
2024-05-21 09:21:30 UTC	4345	IN	Data Raw: 31 30 46 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 7b 7d 2c 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 75 3d 65 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 63 61 6c 6c 28 75 2e 65 78 70 6f 72 74 73 2c 75 2c 75 2e 65 78 70 6f 72 74 73 2c 74 29 2c 75 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 72 2c 6e 3d 5b 5d 2c 74 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 2c 75 29 7b 69 66 28 21 65 29 7b 76 61 72 20 69 3d 31 2f 30 3b 66 6f 72 28 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 65 3d 6e 5b 61 5d 5b 30 5d 2c 6f 3d 6e 5b 61 Data Ascii: 10F1!function(){var n,r={},e={};function t(n){var o=e[n];if(void 0!==o)return o.exports;var u=e[n]={exports:{}};return r[n].call(u.exports,u,u.exports,t),u.exports}t.m=r,n=[],t.O=function(r,e,o,u){if(!e){var i=1/0;for(a=0;a<n.length;a++){e=n[a][0],o=n[a
2024-05-21 09:21:30 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 6f 6e 20 58 28 65 29 7b 76 61 72 20 6e 3d 28 30 2c 76 2e 67 65 74 50 72 65 62 69 64 49 6e 74 65 72 6e 61 6c 29 28 29 2e 73 65 74 45 69 64 50 65 72 6d 69 73 73 69 6f 6e 73 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 30 2c 76 2e 69 73 41 72 72 61 79 29 28 65 29 26 26 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 76 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 29 28 65 2e 69 64 4f 62 6a 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 69 64 4f 62 6a 29 2e 6c 65 6e 67 74 68 7d 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 Data Ascii: 3FC0on X(e){var n=(0,v.getPrebidInternal)().setEidPermissions;"function"==typeof n&&(0,v.isArray)(e)&&n(function(e){var n=[];return e.filter((function(e){return(0,v.isPlainObject)(e.idObj)&&Object.keys(e.idObj).length})).forEach((function(e){Object.keys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49748	188.114.97.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:30 UTC	487	OUT	GET /static-res/img/search.svg?id=b28071f3b9c4778b36f1 HTTP/1.1 Host: custommapposter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288
2024-05-21 09:21:30 UTC	632	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:30 GMT Content-Type: image/svg+xml Content-Length: 219 Connection: close CF-Cache-Status: HIT Age: 800 Last-Modified: Tue, 21 May 2024 09:08:10 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6xW5GArUdsgu0TrEruqSRjrBsYBfDzTzzXGs8nOr8%2BTdkGy96dyebMaQBJDUFWsnu3tgI2PKoOi6zM2QvqrsASx3h0e7UuV%2F4FmakPe3eVAl6r7yaA5XgCC7%2F9eRbzKMmBcYU4iT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f22f9086a59-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:30 UTC	219	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 73 74 72 6f 6b 65 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 33 22 20 64 3d 22 4d 32 31 20 32 31 6c 2d 36 2d 36 6d 32 2d 35 61 37 20 37 20 30 20 31 31 2d 31 34 20 30 20 37 20 37 20 30 20 30 31 31 34 20 30 7a 22 20 2f 3e 0a 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="white"> <path stroke-linecap="round" stroke-linejoin="round" stroke-width="3" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z" /></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49749	188.114.97.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:30 UTC	450	OUT	GET /?adlocation= HTTP/1.1 Host: custommapposter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288
2024-05-21 09:21:30 UTC	681	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: immutable, max-age=31536000, public CF-Cache-Status: HIT Age: 275377 Last-Modified: Sat, 18 May 2024 04:51:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8XVul5uCi65GPcLDQ2C4vIGyKWIsqAqo1b1ZlTX%2BZb4xuiImQzuDGqeMNb7GeQS1UYrRjlzOB2G8yA3dUA7n%2BXhQsxkFIeVuELjsBQ1u9ZQB50QlLnhq6TIT52GAEGw0nupUF1fK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f22fd6e433d-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:30 UTC	688	IN	Data Raw: 33 61 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 31 42 34 36 51 4c 37 51 72 52 4a 63 37 75 43 37 55 6f 6c 46 56 4f 45 71 4b 4f 4c 6e 76 6a 31 37 6b 4b 45 73 4d 55 65 70 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c Data Ascii: 3ab2<!DOCTYPE html><html><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="csrf-token" content="1B46QL7QrRJc7uC7UolFVOEqKOLnvj17kKEsMUep"> <meta name="robots" content="index, follow,
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 35 46 45 37 35 45 32 39 39 33 38 46 45 31 44 30 44 44 35 34 42 41 44 32 42 32 35 43 39 39 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 41 32 30 39 32 30 46 45 38 42 32 36 39 33 41 38 34 34 36 39 33 43 41 37 42 32 44 41 30 33 34 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 34 34 33 35 32 37 39 36 32 39 38 34 45 44 36 31 31 33 45 37 31 43 32 45 31 43 31 45 36 46 43 43 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 35 38 44 Data Ascii: ta name="msvalidate.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" /><meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" /><meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" /><meta name="msvalidate.01" content="58D
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 45 37 43 42 33 45 30 42 43 39 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 46 37 42 33 42 44 32 46 45 36 39 30 37 32 42 43 43 45 34 31 32 36 42 39 43 43 35 30 34 35 43 42 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 38 45 46 39 35 41 44 32 31 32 41 44 44 34 38 43 38 37 38 46 32 31 42 31 39 33 41 42 38 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 43 32 35 44 41 37 34 43 38 46 46 35 46 41 42 31 34 32 46 43 37 30 32 30 34 42 42 30 37 41 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 Data Ascii: E7CB3E0BC9" /><meta name="msvalidate.01" content="F7B3BD2FE69072BCCE4126B9CC5045CB" /><meta name="msvalidate.01" content="98EF95AD212ADD48C878F21B193AB8E4" /><meta name="msvalidate.01" content="7C25DA74C8FF5FAB142FC70204BB07A6" /><meta name="msvalidat
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 38 36 36 30 43 36 42 34 33 44 35 34 42 37 31 42 30 33 32 35 37 33 44 31 44 43 43 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 36 38 32 37 32 43 39 44 31 46 31 37 46 34 33 41 33 36 42 45 46 39 30 30 43 33 37 39 32 33 37 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 35 32 42 36 38 46 39 33 31 34 32 37 33 32 45 41 42 37 43 43 42 37 41 35 44 37 37 36 44 31 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 42 31 41 39 39 42 44 44 37 44 36 31 35 36 42 33 30 41 37 38 45 36 38 46 33 36 35 43 39 46 38 33 22 20 2f 3e 0a 3c 6d 65 Data Ascii: 8660C6B43D54B71B032573D1DCC6" /><meta name="msvalidate.01" content="968272C9D1F17F43A36BEF900C379237" /><meta name="msvalidate.01" content="752B68F93142732EAB7CCB7A5D776D16" /><meta name="msvalidate.01" content="B1A99BDD7D6156B30A78E68F365C9F83" /><me
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 20 2d 20 41 6c 6c 20 41 62 6f 75 74 20 45 76 65 72 79 74 68 69 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 20 69 73 20 61 20 77 65 62 73 69 74 65 20 74 68 61 74 20 77 72 69 74 65 73 20 61 62 6f 75 74 20 6d 61 6e 79 20 74 6f 70 69 63 73 20 6f 66 20 69 6e 74 65 72 65 73 74 20 74 6f 20 79 6f 75 2c 20 69 74 26 23 30 33 39 3b 73 20 61 20 62 6c 6f 67 20 74 68 61 74 20 73 68 61 72 65 73 20 75 73 65 66 75 6c 20 6b 6e 6f 77 6c 65 64 67 65 20 61 6e 64 20 69 6e 73 69 67 68 74 Data Ascii: ><meta property="og:title" content="Custommapposter - All About Everything" /><meta property="og:description" content="Custommapposter is a website that writes about many topics of interest to you, it's a blog that shares useful knowledge and insight
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 39 63 62 61 37 36 62 31 66 63 64 38 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 6a 73 2f 6e 65 77 73 69 6b 65 2e 6a 73 3f 69 64 3d 32 65 32 39 39 33 63 62 33 64 37 35 62 62 33 34 39 32 62 31 22 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 20 2f 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: 9cba76b1fcd8"> <script src="/static-res/js/newsike.js?id=2e2993cb3d75bb3492b1" defer></script> <link rel="preconnect" href="https://www.googletagmanager.com" /><link rel="dns-prefetch" href="https://www.googletagmanager.com" />
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 32 65 63 62 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 70 70 6c 65 2d 69 63 6f 6e 2d 31 38 30 78 31 38 30 2e 70 6e 67 3f 69 64 3d 61 63 35 64 38 36 36 39 66 39 66 61 63 30 30 37 31 36 64 61 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 31 39 32 78 31 39 32 2e 70 6e 67 3f 69 64 3d 38 64 65 31 Data Ascii: 2ecb" /> <link rel="apple-touch-icon" sizes="180x180" href="/static-res/img/newsike/apple-icon-180x180.png?id=ac5d8669f9fac00716da" /> <link rel="icon" type="image/png" sizes="192x192" href="/static-res/img/newsike/android-icon-192x192.png?id=8de1
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 67 72 6f 77 2d 69 6e 69 74 69 61 6c 69 7a 65 72 3d 22 22 3e 21 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 7c 7c 28 28 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 2e 5f 2e 70 75 73 68 28 65 29 3b 7d 29 2c 28 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 2e 5f 3d 5b 5d 29 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 28 65 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 29 2c 28 65 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 66 61 76 65 73 2e 67 72 6f 77 2e 6d 65 2f 6d 61 69 6e 2e 6a 73 22 29 2c 28 65 2e Data Ascii: <script data-grow-initializer="">!(function(){window.growMe\|\|((window.growMe=function(e){window.growMe._.push(e);}),(window.growMe._=[]));var e=document.createElement("script");(e.type="text/javascript"),(e.src="https://faves.grow.me/main.js"),(e.
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 30 20 66 6c 65 78 2d 31 20 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6d 69 6e 2d 77 2d 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 70 2d 32 20 72 6f 75 6e 64 65 64 2d 6c 67 22 20 3a 63 6c 61 73 73 3d 22 7b 20 27 62 67 2d 69 6e 64 69 67 6f 2d 36 30 30 27 3a 20 73 74 79 6c 65 20 3d 3d 20 27 73 75 63 63 65 73 73 27 2c 20 27 62 67 2d 72 65 64 2d 36 30 30 27 3a 20 73 74 79 6c 65 20 3d 3d 20 27 64 61 6e 67 65 72 27 20 7d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 78 2d 73 68 6f 77 3d 22 73 74 79 6c 65 20 3d 3d 20 27 73 75 63 63 65 73 73 27 22 20 63 6c 61 73 73 3d 22 68 2d 35 Data Ascii: <div class="w-0 flex-1 flex items-center min-w-0"> <span class="flex p-2 rounded-lg" :class="{ 'bg-indigo-600': style == 'success', 'bg-red-600': style == 'danger' }"> <svg x-show="style == 'success'" class="h-5
2024-05-21 09:21:30 UTC	1369	IN	Data Raw: 61 67 65 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 2d 73 68 72 69 6e 6b 2d 30 20 73 6d 3a 6d 6c 2d 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 2d 6d 72 2d 31 20 66 6c 65 78 20 70 2d 32 20 72 6f 75 6e 64 65 64 2d 6d 64 20 66 6f 63 75 73 3a 6f 75 74 6c 69 6e 65 2d 6e 6f 6e 65 20 73 6d 3a 2d 6d 72 2d 32 20 74 72 61 6e 73 69 74 69 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 63 6c 61 73 73 Data Ascii: age"></p> </div> <div class="flex-shrink-0 sm:ml-3"> <button type="button" class="-mr-1 flex p-2 rounded-md focus:outline-none sm:-mr-2 transition" :class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49755	185.3.92.76	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:30 UTC	736	OUT	GET /assets/scripts/vendors/xdomain/1.0.8a/xdomain_cookie.html HTTP/1.1 Host: monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:30 UTC	733	IN	HTTP/1.1 200 OK server: nginx date: Tue, 21 May 2024 09:21:30 GMT content-type: text/html content-length: 3440 vary: Accept-Encoding x-guploader-uploadid: ABPtcPrQzKFkz6PxWA2TeQ9pknqaY27hDD_VD8LYOmPkhbLWZ5Vlfsp64RzIbZAQYOdc32f2cJmrQOdngQ x-goog-generation: 1598340969597109 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 3440 x-goog-hash: crc32c=84qDrg== x-goog-hash: md5=UK93eCDb5GkYdLDTqpa2gw== x-goog-storage-class: STANDARD expires: Fri, 16 May 2025 09:21:30 GMT cache-control: max-age=31104000 age: 1703 last-modified: Tue, 25 Aug 2020 07:36:09 GMT cache-control: public x-cache: HIT access-control-allow-origin: * accept-ranges: bytes connection: close
2024-05-21 09:21:30 UTC	3440	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 48 45 41 44 3e 0a 09 3c 73 63 72 69 70 74 3e 0a 09 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 09 77 69 6e 64 6f 77 2e 49 66 72 61 6d 65 53 68 69 6d 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 09 09 09 2f 2f 6f 72 69 67 6e 20 26 20 6e 61 6d 65 73 70 61 63 65 20 64 61 74 61 20 69 73 20 70 61 73 73 65 64 20 69 6e 20 76 69 61 20 75 72 6c 65 6e 63 6f 64 65 64 20 6a 73 6f 6e 20 6f 62 6a 65 63 74 20 69 6e 20 75 72 6c 20 68 61 73 68 0a 09 09 09 76 61 72 20 5f 68 61 73 68 5f 64 61 74 61 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 28 31 29 29 29 2c 0a 09 09 09 09 5f 6e Data Ascii: <!DOCTYPE html><HEAD><script>"use strict";window.IframeShim = (function(){//orign & namespace data is passed in via urlencoded json object in url hashvar _hash_data = JSON.parse(decodeURIComponent(window.location.hash.substr(1))),_n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49757	172.64.144.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	584	OUT	GET /OOh3bTrtb2nHyOwGk2LTO5SWo54/gpt_and_prebid/config.js HTTP/1.1 Host: cdn.confiant-integrations.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:31 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: fITyQwoG39RtvkVz829wfNsYVIj4eonaL6BZh1jI+BdnxyaxNsOGYgH5UYl72jOpV+Jbr/xTfSLz45Luz/o1pBKhJ4Fpc89AwyCa/u+cvI8= x-amz-request-id: GSNSMA3PJJJYDTBE Last-Modified: Tue, 21 May 2024 08:00:31 GMT ETag: W/"538c3c743866519ffccc474b7324b2b8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=900, stale-while-revalidate=3600 CF-Cache-Status: HIT Age: 847 Server: cloudflare CF-RAY: 88737f2b08ea42c8-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:31 UTC	772	IN	Data Raw: 37 64 35 62 0d 0a 20 20 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 73 70 61 63 65 64 2d 63 6f 6d 6d 65 6e 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 76 61 72 20 63 6f 6e 66 69 61 6e 74 47 6c 6f 62 61 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 20 7c 7c 20 28 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 20 3d 20 7b 7d 29 3b 0a 20 20 76 61 72 20 63 6c 69 65 6e 74 53 65 74 74 69 6e 67 73 20 3d 20 28 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 5b 27 4f 4f 68 33 62 54 72 74 62 32 6e 48 79 4f 77 47 6b 32 4c 54 4f 35 53 57 6f 35 34 27 5d 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 5b 27 4f 4f 68 33 62 54 72 74 62 32 6e 48 79 4f 77 47 6b 32 4c 54 4f Data Ascii: 7d5b /* eslint-disable spaced-comment */(function() { var confiantGlobal = window.confiant \|\| (window.confiant = {}); var clientSettings = (window.confiant && window.confiant['OOh3bTrtb2nHyOwGk2LTO5SWo54'] && window.confiant['OOh3bTrtb2nHyOwGk2LTO
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 52 65 70 6f 72 74 65 72 43 6f 6e 66 69 67 29 3b 0a 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 61 64 52 65 70 6f 72 74 65 72 43 6f 6e 66 69 67 20 3d 20 7b 7d 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 73 65 74 74 69 6e 67 73 20 3d 20 7b 0a 20 20 20 20 70 72 6f 70 65 72 74 79 49 64 3a 20 27 4f 4f 68 33 62 54 72 74 62 32 6e 48 79 4f 77 47 6b 32 4c 54 4f 35 53 57 6f 35 34 27 2c 0a 20 20 20 20 61 64 53 65 72 76 65 72 3a 20 27 68 74 74 70 73 3a 2f 2f 70 72 6f 74 65 63 74 65 64 2d 62 79 2e 63 6c 61 72 69 75 6d 2e 69 6f 27 2c 0a 20 20 20 20 63 6f 6e 66 69 61 6e 74 43 64 6e 3a 20 27 63 64 6e 2e 63 6f 6e 66 69 61 6e 74 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 2e 6e 65 74 27 2c 0a 20 20 20 20 6d 61 70 70 69 6e 67 3a 20 27 57 33 73 69 61 53 49 36 4d 69 77 Data Ascii: ReporterConfig); } catch (e) { adReporterConfig = {}; } var settings = { propertyId: 'OOh3bTrtb2nHyOwGk2LTO5SWo54', adServer: 'https://protected-by.clarium.io', confiantCdn: 'cdn.confiant-integrations.net', mapping: 'W3siaSI6Miw
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 34 39 3a 31 31 33 30 31 35 35 32 22 5d 7d 2c 7b 22 6f 69 22 3a 22 37 78 66 63 32 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 36 32 35 30 37 30 37 34 22 5d 7d 2c 7b 22 6f 69 22 3a 22 61 75 62 36 30 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 39 37 34 3a 37 31 30 36 32 36 37 22 5d 7d 2c 7b 22 6f 69 22 3a 22 66 71 6f 72 6d 35 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 34 33 31 39 38 39 39 30 30 22 5d 7d 2c 7b 22 6f 69 22 3a 22 73 78 74 67 68 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 30 37 31 34 32 34 35 39 22 5d 7d 2c 7b 22 Data Ascii: 49:11301552"]},{"oi":"7xfc27","ot":2,"rs":0,"s":["aqid=\"2249:562507074"]},{"oi":"aub607","ot":2,"rs":0,"s":["aqid=\"2974:7106267"]},{"oi":"fqorm5","ot":2,"rs":0,"s":["aqid=\"2249:431989900"]},{"oi":"sxtgh6","ot":2,"rs":0,"s":["aqid=\"2249:507142459"]},{"
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 39 22 5d 7d 2c 7b 22 6f 69 22 3a 22 65 6c 71 36 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 31 38 35 37 34 31 22 5d 7d 2c 7b 22 6f 69 22 3a 22 75 6c 6c 67 68 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 30 37 31 34 31 38 37 37 22 5d 7d 2c 7b 22 6f 69 22 3a 22 70 6a 6f 6b 31 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 31 39 38 36 3a 35 30 38 31 34 31 37 39 30 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6f 77 66 6d 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 36 34 38 30 36 39 35 31 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6d 38 73 72 7a Data Ascii: 9"]},{"oi":"elq637","ot":2,"rs":1,"s":["aqid=\"3858:6185741"]},{"oi":"ullgh6","ot":2,"rs":0,"s":["aqid=\"2249:507141877"]},{"oi":"pjok17","ot":2,"rs":0,"s":["aqid=\"1986:508141790"]},{"oi":"owfm37","ot":2,"rs":0,"s":["aqid=\"2249:564806951"]},{"oi":"m8srz
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 35 31 35 39 31 39 30 31 30 22 5d 7d 2c 7b 22 6f 69 22 3a 22 75 67 75 65 6c 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 31 35 39 31 38 30 36 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 76 67 75 65 6c 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 31 35 39 32 30 35 32 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 7a 66 67 6d 6d 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 32 33 35 36 33 35 35 39 22 5d 7d 2c 7b 22 6f 69 22 3a 22 64 31 65 69 30 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 35 38 35 35 39 35 35 37 22 5d 7d 2c 7b 22 Data Ascii: 515919010"]},{"oi":"uguel6","ot":2,"rs":0,"s":["aqid=\"2249:515918066"]},{"oi":"vguel6","ot":2,"rs":0,"s":["aqid=\"2249:515920525"]},{"oi":"zfgmm6","ot":2,"rs":0,"s":["aqid=\"2249:523563559"]},{"oi":"d1ei07","ot":2,"rs":0,"s":["aqid=\"2249:558559557"]},{"
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 31 34 39 3a 31 31 34 36 30 39 36 33 22 5d 7d 2c 7b 22 6f 69 22 3a 22 74 72 37 79 74 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 34 30 38 38 39 30 32 32 22 5d 7d 2c 7b 22 6f 69 22 3a 22 78 6b 65 68 7a 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 36 38 34 36 34 39 33 35 33 35 33 39 22 5d 7d 2c 7b 22 6f 69 22 3a 22 36 72 31 62 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 36 34 34 34 31 37 39 34 22 5d 7d 2c 7b 22 6f 69 22 3a 22 30 34 6b 73 34 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 38 36 31 3a 32 33 35 37 33 31 34 37 22 Data Ascii: 149:11460963"]},{"oi":"tr7yt6","ot":2,"rs":0,"s":["aqid=\"2249:540889022"]},{"oi":"xkehz6","ot":2,"rs":1,"s":["aqid=\"2249:684649353539"]},{"oi":"6r1b37","ot":2,"rs":0,"s":["aqid=\"2249:564441794"]},{"oi":"04ks47","ot":2,"rs":1,"s":["aqid=\"2861:23573147"
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 36 39 31 32 32 34 32 31 30 33 39 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 75 7a 71 62 32 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 39 37 34 3a 37 31 36 37 35 30 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 75 7a 61 33 6f 33 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 31 39 34 33 34 35 34 35 31 22 5d 7d 2c 7b 22 6f 69 22 3a 22 73 6d 69 33 72 34 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 33 39 30 38 30 30 33 34 37 22 5d 7d 2c 7b 22 6f 69 22 3a 22 69 66 61 65 61 35 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 Data Ascii: "rs":1,"s":["aqid=\"2249:691224210395"]},{"oi":"uzqb27","ot":2,"rs":0,"s":["aqid=\"2974:7167505"]},{"oi":"uza3o3","ot":2,"rs":0,"s":["aqid=\"2249:194345451"]},{"oi":"smi3r4","ot":2,"rs":1,"s":["aqid=\"2249:390800347"]},{"oi":"ifaea5","ot":2,"rs":0,"s":["a
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 32 38 35 39 32 33 30 30 22 5d 7d 2c 7b 22 6f 69 22 3a 22 65 6a 6f 71 72 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 37 37 38 3a 34 31 31 38 33 33 38 35 39 32 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6a 32 72 71 72 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 37 37 38 3a 34 31 31 38 33 33 38 35 32 34 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6e 67 70 63 7a 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 35 38 37 38 38 32 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 37 6e 73 66 31 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 Data Ascii: t":2,"rs":0,"s":["aqid=\"2249:528592300"]},{"oi":"ejoqr6","ot":2,"rs":0,"s":["aqid=\"3778:4118338592"]},{"oi":"j2rqr6","ot":2,"rs":0,"s":["aqid=\"3778:4118338524"]},{"oi":"ngpcz6","ot":2,"rs":0,"s":["aqid=\"3858:5878826"]},{"oi":"7nsf17","ot":2,"rs":0,"s"
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 79 76 35 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 34 36 34 31 32 34 38 30 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 78 6c 6c 74 39 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 31 34 39 3a 31 31 33 32 33 34 39 39 22 5d 7d 2c 7b 22 6f 69 22 3a 22 7a 68 30 71 69 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 30 36 34 37 33 30 30 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 67 6d 61 32 6a 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 31 32 33 32 36 32 34 39 22 5d 7d 2c 7b 22 6f 69 22 3a 22 74 32 71 34 6a 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 Data Ascii: yv5","ot":2,"rs":0,"s":["aqid=\"2249:464124805"]},{"oi":"xllt96","ot":2,"rs":0,"s":["aqid=\"2149:11323499"]},{"oi":"zh0qi6","ot":2,"rs":0,"s":["aqid=\"2249:506473006"]},{"oi":"gma2j6","ot":2,"rs":0,"s":["aqid=\"2249:512326249"]},{"oi":"t2q4j6","ot":2,"rs"
2024-05-21 09:21:31 UTC	1369	IN	Data Raw: 79 30 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 35 39 36 3a 35 34 35 35 38 39 31 22 5d 7d 2c 7b 22 6f 69 22 3a 22 36 31 68 6c 31 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 35 39 38 33 35 38 33 39 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6c 71 31 63 32 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 39 37 34 3a 37 31 36 37 34 37 31 22 5d 7d 2c 7b 22 6f 69 22 3a 22 74 79 66 63 32 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 32 32 34 39 3a 35 36 32 35 39 33 32 38 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 76 71 70 67 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 30 2c Data Ascii: y07","ot":2,"rs":0,"s":["aqid=\"2596:5455891"]},{"oi":"61hl17","ot":2,"rs":0,"s":["aqid=\"2249:559835839"]},{"oi":"lq1c27","ot":2,"rs":0,"s":["aqid=\"2974:7167471"]},{"oi":"tyfc27","ot":2,"rs":0,"s":["aqid=\"2249:562593286"]},{"oi":"vqpg37","ot":2,"rs":0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49759	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	565	OUT	GET /latest.js HTTP/1.1 Host: static.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://custommapposter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	752	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:31 GMT Content-Type: application/javascript Content-Length: 1354 Connection: close x-amz-id-2: yOaZA3pkMrPvDxx6Lld+bSVrAd7/VD2xkSDscdqFUYvkT8o24pHLpnCrhzmop7ZzpqZmOQaNsRU= x-amz-request-id: SMT4T7XAB01M0VEF Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Thu, 09 May 2024 11:23:41 GMT ETag: "905005627335d37ae2e76b8d0b10c93f" Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 1029390 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737f2afb8e43f4-EWR
2024-05-21 09:21:31 UTC	617	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 74 72 79 7b 69 66 28 22 73 65 6e 64 42 65 61 63 6f 6e 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 61 2b 22 26 62 65 61 63 6f 6e 3d 31 22 29 29 72 65 74 75 72 6e 7d 63 61 74 63 68 28 66 29 7b 7d 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 61 7d 74 72 79 7b 66 6f 72 28 76 61 72 20 64 3d 22 2f 64 79 65 3f 22 2b 5b 22 5f 3d 22 2b 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 22 74 79 70 65 3d 6c 61 74 65 73 74 3a 62 6f 6f 74 26 61 63 3d 32 26 61 63 6d 3d 67 33 6c 22 2c 22 68 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 6f 63 61 74 69 6f Data Ascii: 'use strict';(function(){function g(a){try{if("sendBeacon"in navigator&&navigator.sendBeacon(a+"&beacon=1"))return}catch(f){}(new Image).src=a}try{for(var d="/dye?"+["_="+(new Date).getTime(),"type=latest:boot&ac=2&acm=g3l","h="+encodeURIComponent(locatio
2024-05-21 09:21:31 UTC	737	IN	Data Raw: 61 74 65 73 74 5f 74 73 22 29 7c 7c 62 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 6c 61 74 65 73 74 5f 74 73 22 2c 62 29 2c 63 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6c 61 74 65 73 74 5f 66 6e 22 29 2c 63 7c 7c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 61 3b 69 66 28 21 28 61 3d 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 29 7b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 63 6f 6f 6b 69 65 74 65 73 74 3d 31 22 3b 76 61 72 20 66 3d 2d 31 21 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 63 6f 6f 6b 69 65 74 65 73 74 3d 22 29 3b 64 6f 63 75 6d 65 6e 74 Data Ascii: atest_ts")\|\|b,window.sessionStorage.setItem("latest_ts",b),c=window.sessionStorage.getItem("latest_fn"),c\|\|(function(){try{var a;if(!(a=!navigator.cookieEnabled)){try{document.cookie="cookietest=1";var f=-1!=document.cookie.indexOf("cookietest=");document

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49764	35.71.131.137	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	612	OUT	GET /track/rid?ttd_pid=2jqw284&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	599	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:31 GMT Content-Type: application/json Content-Length: 109 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://custommapposter.com cache-control: private expires: Thu, 20 Jun 2024 09:21:31 GMT set-cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; expires=Wed, 21 May 2025 09:21:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none vary: Origin
2024-05-21 09:21:31 UTC	109	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 64 37 63 35 38 39 66 61 2d 32 34 38 62 2d 34 32 65 30 2d 38 62 63 34 2d 66 66 62 34 62 64 63 33 33 64 35 63 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 35 2d 32 31 54 30 39 3a 32 31 3a 33 31 22 7d Data Ascii: {"TDID":"d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-05-21T09:21:31"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49758	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	639	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	786	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Tue, 21 May 2024 09:21:31 GMT Expires: Tue, 21 May 2024 09:21:31 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 221 / 19864 / m202405090101 / config-hash: 15584453851435899794 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 95634 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	604	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="fun
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 2c 74 3d 7b 7d 2c 68 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 6e 75 6c 6c 21 3d 61 29 7b 63 3d 68 61 5b 62 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 63 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 Data Ascii: &c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=func
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 61 77 3d 61 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 53 79 6d 62 6f 6c 26 26 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 75 28 74 2e 53 79 6d Data Ascii: function(){return ia(aa(this))}})}return a},"es6");var ia=function(a){a={next:a};a[u(t.Symbol,"iterator")]=function(){return this};return a},ja=function(a){return a.raw=a},x=function(a){var b="undefined"!=typeof t.Symbol&&u(t.Symbol,"iterator")&&a[u(t.Sym
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 6e 62 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 Data Ascii: yDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.nb=b.prototype},sa=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=thi
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 78 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6b 3d 75 28 6c 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 6c 29 2c 6d 3d 6b 2e 6e Data Ascii: unction"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),l=new a(x([[h,"s"]]));if("s"!=l.get(h)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var k=u(l,"entries").call(l),m=k.n
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6b 3d 75 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 6d 3b 21 28 6d 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6c 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 75 28 63 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 6c 26 26 74 79 70 65 6f 66 20 6c Data Ascii: tion(h){return h.value})};c.prototype.forEach=function(h,l){for(var k=u(this,"entries").call(this),m;!(m=k.next()).done;)m=m.value,h.call(l,m[1],m[0],this)};c.prototype[u(t.Symbol,"iterator")]=u(c.prototype,"entries");var d=function(h,l){var k=l&&typeof l
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 3b 72 65 74 75 72 6e 20 30 3e 62 3f 2d 63 3a 63 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 6b 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 77 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 70 72 Data Ascii: ;return 0>b?-c:c}},"es6");w("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)ka(b,d)&&c.push(b[d]);return c}},"es8");w("Object.is",function(a){return a?a:function(b,c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}},"es6");w("Array.pr
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 2c 22 65 73 38 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 53 79 6d 62 6f 6c 26 26 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: :function(){return ua(this,function(b,c){return c})}},"es8");w("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(h){return h};var e=[],f="undefined"!=typeof t.Symbol&&u(t.Symbol,"iterator")&&b[u(t.Symbol,"iterator")];if("function"==
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 75 28 74 68 69 73 2e 67 2c 22 76 61 6c 75 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 2e 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 75 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 73 22 29 3b 62 2e 70 72 6f 74 6f 74 79 70 65 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 75 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 73 22 29 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 Data Ascii: (){return u(this.g,"values").call(this.g)};b.prototype.keys=u(b.prototype,"values");b.prototype[u(t.Symbol,"iterator")]=u(b.prototype,"values");b.prototype.forEach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es
2024-05-21 09:21:31 UTC	1390	IN	Data Raw: 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 63 3d 63 7c 7c 43 3b 61 5b 30 5d 69 6e 20 63 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 29 7b 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e Data Ascii: a=function(a,b,c){a=a.split(".");c=c\|\|C;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};function ya(a){C.setTimeout(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49763	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	627	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 382 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	382	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 31 30 31 33 2c 22 70 64 22 3a 22 4d 54 49 39 54 57 39 36 61 57 78 73 59 53 55 79 52 6a 55 75 4d 43 55 79 4d 43 68 58 61 57 35 6b 62 33 64 7a 4a 54 49 77 54 6c 51 6c 4d 6a 41 78 4d 43 34 77 4a 54 4e 43 4a 54 49 77 56 32 6c 75 4e 6a 51 6c 4d 30 49 6c 4d 6a 42 34 4e 6a 51 70 4a 54 49 77 51 58 42 77 62 47 56 58 5a 57 4a 4c 61 58 51 6c 4d 6b 59 31 4d 7a 63 75 4d 7a 59 6c 4d 6a 41 6f 53 30 68 55 54 55 77 6c 4d 6b 4d 6c 4d 6a 42 73 61 57 74 6c 4a 54 49 77 52 32 56 6a 61 32 38 70 4a 54 49 77 51 32 68 79 62 32 31 6c 4a 54 4a 47 4d 54 45 33 4c 6a 41 75 4d 43 34 77 4a 54 49 77 55 32 46 6d 59 58 4a 70 4a 54 4a 47 4e 54 4d 33 4c 6a 4d 32 4a 6a 6b 39 59 33 56 7a Data Ascii: {"name":"id5Id","params":{"partner":1013,"pd":"MTI9TW96aWxsYSUyRjUuMCUyMChXaW5kb3dzJTIwTlQlMjAxMC4wJTNCJTIwV2luNjQlM0IlMjB4NjQpJTIwQXBwbGVXZWJLaXQlMkY1MzcuMzYlMjAoS0hUTUwlMkMlMjBsaWtlJTIwR2Vja28pJTIwQ2hyb21lJTJGMTE3LjAuMC4wJTIwU2FmYXJpJTJGNTM3LjM2Jjk9Y3Vz
2024-05-21 09:21:31 UTC	421	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://custommapposter.com vary: Origin access-control-allow-credentials: true content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:21:30 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:31 UTC	179	IN	Data Raw: 41 38 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 31 30 31 33 2e 6a 73 6f 6e 22 2c 22 6f 76 65 72 72 69 64 65 73 22 3a 7b 22 70 62 45 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 7d 7d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: A8{"fetchCall":{"url":"https://id5-sync.com/g/v2/1013.json","overrides":{"pbExtensions":{}}},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49765	162.19.138.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	597	OUT	GET /analytics/1013/pbjs HTTP/1.1 Host: api.id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	377	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers cache-control: max-age=300, public access-control-allow-origin: * content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:21:30 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:31 UTC	76	IN	Data Raw: 34 36 0d 0a 7b 22 69 6e 67 65 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2f 65 76 65 6e 74 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 31 30 7d 0d 0a Data Ascii: 46{"ingestUrl":"https://api.id5-sync.com/analytics/event","sampling":10}
2024-05-21 09:21:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49773	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	615	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2314 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	2314	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:31 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:31 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 31 32 32 66 34 33 66 32 2d 63 39 38 31 2d 34 63 33 35 2d 61 65 38 66 2d 35 61 34 64 64 39 66 34 34 66 33 38 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"122f43f2-c981-4c35-ae8f-5a4dd9f44f38","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49774	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	615	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2359 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	2359	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:31 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:31 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 34 37 33 61 35 66 66 31 2d 61 37 33 62 2d 34 63 33 33 2d 62 36 61 34 2d 30 37 37 39 39 30 36 39 33 39 34 32 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"473a5ff1-a73b-4c33-b6a4-077990693942","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49778	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	643	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1198 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1198	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 38 39 36 38 37 2c 22 62 69 64 49 64 22 3a 22 38 64 39 65 61 37 35 63 33 63 62 63 64 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 37 36 36 30 66 30 39 35 2d 38 35 36 37 2d 34 65 31 33 2d 62 32 36 36 2d 65 64 65 37 39 63 31 66 37 61 31 39 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 37 32 38 78 39 30 22 5d Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283289687,"bidId":"8d9ea75c3cbcd1","referrer":null,"adUnitCode":"mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["728x90"]
2024-05-21 09:21:31 UTC	1272	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=3cc1207b-1d11-e3d2-f2db-04ab9991fad9; Domain=.kueezrtb.com; Path=/; Expires=Thu, 20 Jun 2024 09:21:31 GMT; Secure; SameSite=None set-cookie: vdzj1_e8c24d42=u5011zUP97tMyOscAXcgWEUAIxw9AEFADnIPBEMsT30RU0s0Mw8DRnpNe0tVHGxgDQBWYVt5QQVPYmhYD0woGipBVUlgMg8OFX1KeUZBVndmCgAVe0l%2FQFIbNmYNBUN5TXdFBUJsYAgVWG9PfEQCTGRjAQRHfU54RltIZmMIUk17GHlRT1hjYw5WQn0aKUcATjNiWAYWek8sRFYYY2YbG1Z7SngSVkJkaAhWF3tNfURXTm1mXwQRK0ptX0FMZmdYAUUrTX4SAExhYg4DQHVPKUsGGDdyFRVCfx0rSgBJZ2kLUkR5H3hBWhxtMwEDTX1bY1FVSTE2XQVBf0x7EVQbNzIJBRJ8THxFVkx3DRUVFyIMIQdBQGV8G1AQPQttSRgHeXJKUgc%2BECAdQUB3YAEDF39MKRdOTGMxXBpNe0x8XlVPMzUUD0R%2BHSwWB0NmYlxRVmFbLBwNFDAzTV4bIzArUVlYY2VbBUV8QCoVAkxmMlpVQCxOfxdWQjcyG0o%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:31 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 35893 date: Tue, 21 May 2024 09:21:31 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:31 UTC	13976	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 0d 93 e3 38 72 26 fc 57 fa 26 a2 f7 23 ce 3b 43 52 52 95 b4 76 af 03 00 01 7e 48 24 05 90 00 3f 3c 8e 09 89 54 91 12 20 52 55 52 15 29 39 fc df df 00 55 dd 3d 3b b3 63 9f ef de bb b0 1d ad 88 8e 2e 91 20 90 40 66 3e f9 64 02 e2 bf 7c f7 b2 3b bf aa cb f9 bb 3f ff d3 bf 7c 57 76 9d dc ef f4 df ff fc 77 df 6d aa ef fe fc dd 3f ec 8f f5 87 f3 4b f9 e9 f7 cd e5 72 3a ff f9 87 1f ce e7 d3 f7 d5 fe fc fc 7a fe be ec 8e 3f ec 8f a7 7f dc 7d 42 41 3b 18 97 f5 2c 60 de a1 48 72 33 4c d4 3e 4c 43 59 1c 58 b3 4a f8 24 4c f8 25 b4 eb 3e 8c 8d 49 70 a3 d7 28 0d a6 81 93 4f c3 83 cc c1 15 38 cb 3a 9f 04 87 66 1a 25 e0 ea 59 a1 59 4e d8 db 36 35 9b d2 85 6f e5 84 a9 72 3f 3b 6c 2d e3 2d cf 7c 63 93 86 e7 22 5e 18 db 09 78 8b 12 cf 8a Data Ascii: 8r&W&#;CRRv~H$?<T RUR)9U=;c. @f>d\|;?\|Wvwm?Kr:z?}BA;,`Hr3L>LCYXJ$L%>Ip(O8:f%YYN65or?;l--\|c"^x
2024-05-21 09:21:31 UTC	5717	IN	Data Raw: 42 8f 61 ff 36 28 78 59 27 ce 41 b9 d2 57 c3 6a 2d 29 42 32 ef 40 a9 12 30 6d e9 22 7a 62 1c 4d b4 dc d7 37 8a 12 ad 32 e4 11 13 44 04 b6 a8 7a 61 94 a1 80 f3 27 cc 21 bd d8 1a e2 87 51 45 b1 f3 2c 70 b0 4c 5d db f2 dc 63 a2 7c 9e 90 dc 5a 69 e3 0d 22 10 2e 92 11 9a 2d ad 97 c2 82 36 31 40 81 03 81 b2 36 b9 f0 b3 6e 0c 8a 4e 91 31 49 0d 0a c9 5b b5 f5 81 d1 23 3d 40 fc 8a 89 f9 4a 66 52 62 ce 01 c4 55 6a 55 ed 90 65 10 ab d4 5a 2d 27 de 35 da 06 80 aa 85 22 c8 b8 0e 52 36 17 94 c5 5c 23 0d 19 89 82 99 4a 2c e7 09 15 98 73 09 71 55 44 55 2f 0a 7c 6f 46 4b 09 86 05 13 b9 e5 0b 53 15 e6 2e 70 54 6f 96 6d f9 ac 39 c9 b3 4c 13 a3 9a da a0 e0 b4 06 4a 24 b1 ce d0 26 a6 9e 0d 2b 8e ac c2 f7 17 20 a3 41 42 cd a4 19 a9 79 16 bf 09 11 3e 62 63 5f 77 f4 ac 5d 99 50 Data Ascii: Ba6(xY'AWj-)B2@0m"zbM72Dza'!QE,pL]c\|Zi".-61@6nN1I[#=@JfRbUjUeZ-'5"R6\#J,sqUDU/\|oFKS.pTom9LJ$&+ ABy>bc_w]P
2024-05-21 09:21:32 UTC	16200	IN	Data Raw: 87 a3 77 26 06 f6 bb 33 9e 7c 0b 42 7d 2e 09 83 b7 70 58 ec a7 cd f1 14 8e b2 bc 79 0f 04 45 f3 5e 10 06 60 4a af 56 8e a2 b0 dc d5 e5 e9 e8 87 53 6c 54 fb 53 d9 19 f9 0d d4 b5 7e 82 e8 37 ba 26 d5 b4 37 0e 46 d5 c9 4b 82 69 75 f2 9e 7a af e7 a8 89 9a b3 9b 7d 88 e8 f5 b0 7f a5 85 8d 82 c6 9f de b4 dc 51 7f 5f 7a 30 aa 7a fe c0 f0 51 93 bb dd 14 1d 23 a3 6e 78 22 90 b7 8b bb eb e4 76 c9 7b 75 0c 7b 59 1b a8 77 ab 6a 8a 8c 6a 17 4a 69 10 9e 3d 28 3f 53 a3 48 8b b2 2d 60 44 5e 06 61 36 3d bd 47 24 3e b4 0a a6 c4 a8 3c 36 de ee 3d 02 1b b9 75 31 85 06 ea a8 f6 d3 7d 06 6b 85 bf 18 94 fb ae d1 a2 bc 99 fe 89 22 fd 7b 3c 80 a3 8b 8e f2 7a 98 8f f2 e8 87 c1 30 0f 55 d8 25 c1 c0 f4 4f 24 39 21 c7 04 85 e3 70 0a b2 6c c8 10 85 e5 30 18 a3 a4 de 41 12 87 68 bf cc Data Ascii: w&3\|B}.pXyE^`JVSlTS~7&7FKiuz}Q_z0zQ#nx"v{u{YwjjJi=(?SH-`D^a6=G$><6=u1}k"{<z0U%O$9!pl0Ah

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49777	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	643	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1756	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 38 39 37 35 39 2c 22 62 69 64 49 64 22 3a 22 36 30 62 31 36 65 39 63 36 65 66 39 64 38 34 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 63 39 39 32 66 33 38 66 2d 37 39 65 65 2d 34 38 33 62 2d 61 32 30 36 2d 39 38 63 63 38 64 62 35 32 31 61 61 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 32 35 30 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283289759,"bidId":"60b16e9c6ef9d84","referrer":null,"adUnitCode":"mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["300x250
2024-05-21 09:21:31 UTC	1317	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; Domain=.kueezrtb.com; Path=/; Expires=Thu, 20 Jun 2024 09:21:31 GMT; Secure; SameSite=None set-cookie: vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:31 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 49345 date: Tue, 21 May 2024 09:21:31 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:31 UTC	13931	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 09 93 e2 48 b6 26 fa 57 f2 a6 bd a0 32 a7 3a a2 5c 0b 5b 55 53 6d ae 15 01 12 68 45 62 72 0c d3 86 24 b4 86 24 90 a0 b3 e2 b7 3f 73 09 62 a9 a5 bb af d9 d8 b3 67 63 13 69 11 c8 f7 e3 ee c7 bf f3 9d e3 22 ff f9 b9 f4 ab 53 52 57 9f 7f fe 9f ff fc ec e6 79 1c f9 e8 f9 7f fd ed b3 ed 7d fe f9 f3 df ff eb f1 f1 13 db ba a1 9d 05 fe cf 9f d6 85 9f 99 9f 18 75 23 30 3f 7f 1a 92 c3 d1 74 4a e0 c3 4f b4 82 d2 e4 18 00 30 01 13 8c 1c 4e 46 04 00 04 00 00 1f 02 00 00 09 46 00 7c 7a 7c fc f5 ef 5e 74 fe 14 79 b3 1f 1c df 76 f3 6c 8f 63 13 1c 27 7e f8 54 d5 97 c4 9f fd 50 e4 55 54 47 79 f6 b3 ed 54 79 72 aa fd 5f 12 ff 50 ff 0c 8a f6 d3 2f 75 5e a0 87 5f ce 51 15 39 51 12 d5 97 9f c3 c8 f3 fc ec 97 1f 7e fd 7b 94 06 9f aa d2 9d fd Data Ascii: H&W2:\[USmhEbr$$?sbgci"SRWy}u#0?tJO0NFF\|z\|^tyvlc'~TPUTGyTyr_P/u^_Q9Q~{
2024-05-21 09:21:32 UTC	16320	IN	Data Raw: 0b 63 b2 98 33 22 10 8f 6e b4 0e 1a 43 d1 16 07 da b8 59 76 20 32 ae c8 a9 02 f6 3b 2b 6d d9 50 91 39 5c 6a dd 2b 68 fc a6 d5 99 2d a4 3b 2b cd b8 a3 8d ea da 4c 43 1e 7d 99 d2 6c 7e 07 1c 4d 9a 6c b9 9d 2a 41 49 96 f9 62 e2 5e db 78 85 21 9d 4d 14 03 28 88 77 9c d7 74 be 86 e1 f4 4a c7 bb b9 65 62 e3 0d 1f 57 74 62 6d 44 4e 71 65 86 43 f8 10 1c 8c f0 b0 dd 76 2b 11 2e 2e 2e 2e 32 0d a4 e9 bb 6c 6e ea a4 bb b1 69 ec 2c 0b b3 28 f9 48 5d 85 6b 03 bc a6 e1 cd 23 b5 ed 19 44 15 75 1e b4 11 86 90 6a 99 1d 21 7b f6 16 59 5a d6 e0 1c 6b 3b 35 e5 ad 30 f1 f8 30 44 a8 32 bf 52 e6 4a 31 10 42 9c 76 74 7d 30 30 29 81 86 a5 ed cc e6 e8 f0 56 4e 43 4e b3 38 91 92 af 14 f2 7e 92 55 43 92 f3 4b 08 a1 21 e5 bb 08 e4 12 0d 71 4e 99 5c 9d 06 5a 82 26 9f d6 6a 58 29 ba ee Data Ascii: c3"nCYv 2;+mP9\j+h-;+LC}l~Ml*AIb^x!M(wtJebWtbmDNqeCv+....2lni,(H]k#Duj!{YZk;500D2RJ1Bvt}00)VNCN8~UCK!qN\Z&jX)
2024-05-21 09:21:32 UTC	16320	IN	Data Raw: 0c 00 a0 01 00 e8 1d 70 16 00 00 78 00 d0 45 7b 0d 80 cf f6 17 dd 8d ee bf 46 ae 81 0c e4 39 3f b2 34 25 91 e6 16 21 31 41 60 25 46 22 9d 60 b4 63 a4 d3 ee c4 e3 6b 8d 1f 4a 57 eb 2a 6a bb 20 2f af cc 04 98 16 ac 15 43 bf ec 4e ee 56 c2 0e 04 5e 59 5b 58 1f 48 09 db 6d f9 b3 45 4c 2b f6 14 30 86 ee 0f a5 53 60 4b 10 5c a4 93 35 94 18 9d 5c cb c3 ab c8 c0 a1 74 02 35 93 ba b1 43 2a c7 03 c9 5f d6 ac 64 48 9a 45 28 cc 6e be d2 f8 8b 74 15 1b 51 e3 af d2 05 bb 88 2a d6 48 40 be 88 97 1d d4 39 b8 56 8c c0 d0 f1 29 0a a6 c6 e9 51 2c 29 fa 48 67 4f 81 ac 9f d8 46 c4 f2 85 5c 8f 68 55 57 8e b2 01 05 f0 a9 6d be 56 16 02 66 85 f8 09 d1 7c 20 86 95 78 15 4e 2b cd 08 25 cd 27 77 8c 3f b2 12 ab 92 52 a5 94 34 f9 ac e1 bc 2a 31 7a 2d 32 f2 55 d2 9c 2b 38 01 b0 f4 59 Data Ascii: pxE{F9?4%!1A`%F"`ckJWj /CNV^Y[XHmEL+0S`K\5\t5C_dHE(ntQH@9V)Q,)HgOF\hUWmVf\| xN+%'w?R41z-2U+8Y
2024-05-21 09:21:32 UTC	2774	IN	Data Raw: c8 55 bb 57 dc ce 0b ee e0 48 c9 31 24 ac 0a fb f1 69 73 78 8f db ce f4 91 13 06 92 a1 8a 52 89 a9 a2 99 04 c0 77 d4 d2 29 1c 75 59 c9 6c e8 b7 36 c8 84 cb fd b2 6a 89 75 68 6f 4b 95 20 1d dd a4 c0 73 36 5a 50 77 ea 3e 23 d3 3d 82 f9 cd 6c 6e a2 00 6e 15 76 b9 c8 7b e5 49 61 75 32 fa b6 5a f0 78 c0 d9 1f 54 d4 5a 54 9c 5d a2 06 c5 4c 8f 25 e5 65 de f4 77 8c 70 9f 72 9c 66 d8 15 07 46 f3 9c 80 27 e9 aa 27 41 63 76 c0 ce 21 24 c1 be a4 b7 8e 74 d3 60 60 14 f8 8d 08 0e 34 a0 79 3f b5 84 c1 26 55 db 34 93 ef 76 28 02 bc 28 21 83 2d 78 80 fd 32 97 b2 23 41 46 f4 2b 65 c1 29 6d b4 e5 9f 5a 7d a0 be 5f be e3 f3 37 71 c7 03 a7 d7 e2 90 f3 b8 22 d3 89 90 db 39 e1 9d cc 00 cc 1d 84 f3 7c 5d b5 84 39 b7 a4 ef 8f cb 3c f6 30 3b d8 fd 2c 23 15 5e 13 a2 27 3e e0 a4 98 Data Ascii: UWH1$isxRw)uYl6juhoK s6ZPw>#=lnnv{Iau2ZxTZT]L%ewprfF''Acv!$t``4y?&U4v((!-x2#AF+e)mZ}_7q"9\|]9<0;,#^'>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49779	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	625	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 2863 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	2863	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:31 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:31 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:31 GMT x-envoy-upstream-service-time: 1 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 61 39 65 66 66 37 39 37 2d 32 37 65 66 2d 34 38 35 38 2d 38 32 32 32 2d 34 36 30 35 35 34 66 35 35 35 62 38 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"a9eff797-27ef-4858-8222-460554f555b8","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49772	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	615	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	2584	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:31 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:31 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 37 62 64 64 64 34 33 61 2d 38 39 66 36 2d 34 38 37 62 2d 61 31 64 33 2d 35 35 34 34 31 66 34 34 30 61 35 30 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"7bddd43a-89f6-487b-a1d3-55441f440a50","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49780	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	625	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 6908 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	6908	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:31 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:31 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:30 GMT x-envoy-upstream-service-time: 2 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 39 64 64 33 37 31 39 32 2d 34 38 61 65 2d 34 66 39 38 2d 62 36 63 61 2d 38 36 38 65 31 63 61 66 39 30 38 63 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"9dd37192-48ae-4f98-b6ca-868e1caf908c","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49787	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	605	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 808 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	808	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 35 32 36 31 2d 32 32 39 36 2d 30 31 22 2c 22 63 6d 70 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 31 31 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 38 39 36 36 37 2c 22 74 74 66 62 22 3a 32 37 31 39 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 36 31 62 63 63 36 63 62 34 32 32 39 66 38 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 22 3a 22 38 31 65 Data Ascii: {"url":"https://custommapposter.com/article/top/926","publisherToken":"5261-2296-01","cmp":false,"timeout":1100,"version":"8.46.0","connectionType":"fixed","auctionStart":1716283289667,"ttfb":2719,"bidRequests":[{"id":"61bcc6cb4229f8","transactionId":"81e
2024-05-21 09:21:31 UTC	1128	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 21 May 2024 09:21:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 79 Vary: X-HTTP-Method-Override Set-Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; Max-Age=31536000; Domain=.seedtag.com; Path=/; Expires=Wed, 21 May 2025 09:21:31 GMT; Secure; SameSite=None Set-Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; Max-Age=2592000; Domain=.seedtag.com; Path=/; Expires=Thu, 20 Jun 2024 09:21:31 GMT; HttpOnly; Secure; SameSite=None Observe-Browsing-Topics: ?1 Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	79	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 2c 22 63 6f 6f 6b 69 65 53 79 6e 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 73 65 65 64 74 61 67 2e 63 6f 6d 2f 63 73 2e 68 74 6d 6c 3f 70 74 3d 35 32 36 31 2d 32 32 39 36 2d 30 31 26 70 63 3d 55 53 22 7d Data Ascii: {"bids":[],"cookieSync":"https://cs.seedtag.com/cs.html?pt=5261-2296-01&pc=US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.9	49794	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	2847	OUT	GET /trinity.json?key_maker=%7B%2224a8fd48c89b8d%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=f9b21ccc-516b-482c-8d07-46a785a9ff3c&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22a9eff797-27ef-4858-8222-460554f555b8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20li [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1186	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:31 GMT content-type: application/json content-length: 425 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-58 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=1d2b02af-5fab-4505-b4f4-80582e7038de; expires=Thu, 20 Jun 2024 09:21:31 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; expires=Wed, 22 May 2024 09:21:31 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: receive-cookie-deprecation: 1; Secure; Path=/; SameSite=None; Partitioned; Expires=2024-11-17 09:21:31.245383253 +0000 UTC; HttpOnly set-cookie: __uih=1; expires=Tue, 21 May 2024 09:26:31 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s8558\|Zkxnn; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:31 UTC	425	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 32 34 61 38 66 64 34 38 63 38 39 62 38 64 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 Data Ascii: {"slots":{"24a8fd48c89b8d":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/cmf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49795	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	3239	OUT	GET /trinity.json?key_maker=%7B%2244ebe088a5a792a%22%3A%22177369c437c672237248%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%224582bc388aaa7b3%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%2246e8849f03b0374%22%3A%22d23fc2fbe929165f22f9%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=87d04680-5b04-4f64-a7a6-318419b14292&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%229dd37192-48ae-4f98-b6ca-868e1caf908c%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1188	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:31 GMT content-type: application/json content-length: 468 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:30 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; expires=Wed, 22 May 2024 09:21:30 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: receive-cookie-deprecation: 1; Secure; Path=/; SameSite=None; Partitioned; Expires=2024-11-17 09:21:30.914639621 +0000 UTC; HttpOnly set-cookie: __uih=1; expires=Tue, 21 May 2024 09:26:30 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxnn; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:31 UTC	468	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 34 34 65 62 65 30 38 38 61 35 61 37 39 32 61 22 3a 7b 7d 2c 22 34 35 38 32 62 63 33 38 38 61 61 61 37 62 33 22 3a 7b 7d 2c 22 34 36 65 38 38 34 39 66 30 33 62 30 33 37 34 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 Data Ascii: {"slots":{"44ebe088a5a792a":{},"4582bc388aaa7b3":{},"46e8849f03b0374":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.9	49789	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	642	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1313 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1313	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 38 39 37 32 32 2c 22 62 69 64 49 64 22 3a 22 32 32 61 32 32 61 65 33 30 36 65 62 34 35 33 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 37 36 36 30 66 30 39 35 2d 38 35 36 37 2d 34 65 31 33 2d 62 32 36 36 2d 65 64 65 37 39 63 31 66 37 61 31 39 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283289722,"bidId":"22a22ae306eb453","referrer":null,"adUnitCode":"mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"","
2024-05-21 09:21:31 UTC	1154	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; Domain=.cootlogix.com; Path=/; Expires=Thu, 20 Jun 2024 09:21:31 GMT; Secure; SameSite=None set-cookie: vdzj1_3646a4db=n2Q13oGt38w0D71YU2FGUEUkoDXiFFQntvaU1xRwddTgh0A1M7ZlELcRdWXEUAJwQGbDcQQ2VBVQtCAyEFCT1iBlt2FwMIRgcgVFRuNlBNa1YFC0BVdQUDa2QKXiIWUQkTA3ECBTtkUFhlWBENEQMhAwFhbFENcENSDkcAdQBSOmEHC3NWHxpCVncCAjwzBAtwQAcJFAB0BgY9NldYJBARFFUGdlFUbGJRDSMSBAoTBHEECWhmBlp2RFIaWxJyAwZvZQpfchZVDUYCJQBSP2wEWXdHBglVHGYBAmtkUF9%2BQgQJRghwAgk6ZAtecxUGDUISGRsTOjpHATNWCQhbEiNTQSt3CBQ6WBFLEkM3Xl43dwhNcRADDEJRfA4cPWBRXmpDAAESHSEPCD14AFl%2BF1IPFVZyD1Vtdx5NJBtdVhJTMF5eNxxWTX1WBQtAVXICBW8xVwwlTAFcQwV2BAc%2FZVRXZQk%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:36:31 GMT; Secure; SameSite=None date: Tue, 21 May 2024 09:21:31 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49788	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	642	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1868 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1868	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 38 39 37 35 37 2c 22 62 69 64 49 64 22 3a 22 35 38 37 61 32 64 32 30 35 30 37 39 34 64 63 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 63 39 39 32 66 33 38 66 2d 37 39 65 65 2d 34 38 33 62 2d 61 32 30 36 2d 39 38 63 63 38 64 62 35 32 31 61 61 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283289757,"bidId":"587a2d2050794dc","referrer":null,"adUnitCode":"mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.9	49799	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	758	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=p.d.l&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Farticle%2Ftop%2F926%22%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180387 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:31 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.9	49770	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2001 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	2001	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 38 39 36 39 34 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 32 39 65 61 64 35 36 66 37 36 37 36 66 65 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 38 32 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 41 2e 42 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 41 2e 42 23 61 6e 63 68 Data Ascii: {"id":"1716283289694","at":1,"cur":["USD"],"imp":[{"id":"129ead56f7676fe","tagid":"1433182","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDA.B"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDA.B#anch
2024-05-21 09:21:31 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:30 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.9	49771	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 3852 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	3852	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 38 39 37 36 34 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 36 37 30 36 30 36 39 61 31 35 30 38 33 36 32 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 44 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 44 23 72 65 70 65 Data Ascii: {"id":"1716283289764","at":1,"cur":["USD"],"imp":[{"id":"6706069a1508362","tagid":"1433179","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.D"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.D#repe
2024-05-21 09:21:31 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:30 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.9	49785	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	603	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 2838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	2838	OUT	Data Raw: 7b 22 61 22 3a 22 35 34 33 66 66 66 65 64 2d 30 61 36 32 2d 34 30 62 36 2d 61 32 33 65 2d 33 65 66 32 61 66 62 38 62 61 62 65 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"543fffed-0a62-40b6-a23e-3ef2afb8babe","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:31 UTC	910	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:31 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=1_1716283291_1716283291; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:31 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: amuid2=8513443a-0aff-42a8-b16a-97f4fac4a87a; path=/; domain=a-mo.net; expires=Wed, 21 May 2025 09:21:31 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=8513443a-0aff-42a8-b16a-97f4fac4a87a; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:31 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:21:31 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4e 54 51 7a 5a 6d 5a 6d 5a 57 51 74 4d 47 45 32 4d 69 30 30 4d 47 49 32 4c 57 45 79 4d 32 55 74 4d 32 56 6d 4d Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkNTQzZmZmZWQtMGE2Mi00MGI2LWEyM2UtM2VmM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.9	49786	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	603	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	3344	OUT	Data Raw: 7b 22 61 22 3a 22 32 31 30 37 35 64 30 35 2d 36 62 66 36 2d 34 34 62 31 2d 38 32 65 30 2d 61 63 30 66 39 63 66 37 61 34 64 33 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"21075d05-6bf6-44b1-82e0-ac0f9cf7a4d3","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:31 UTC	910	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:31 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=1_1716283291_1716283291; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:31 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; path=/; domain=a-mo.net; expires=Wed, 21 May 2025 09:21:31 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:31 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close
2024-05-21 09:21:31 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4d 6a 45 77 4e 7a 56 6b 4d 44 55 74 4e 6d 4a 6d 4e 69 30 30 4e 47 49 78 4c 54 67 79 5a 54 41 74 59 57 4d 77 5a Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkMjEwNzVkMDUtNmJmNi00NGIxLTgyZTAtYWMwZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.9	49791	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	890	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1371 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1371	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 32 38 38 30 63 63 64 65 35 62 34 64 62 63 62 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 38 31 65 66 65 37 65 32 2d 66 33 36 30 2d 34 32 61 62 2d 38 66 65 30 2d 30 38 35 63 66 64 37 38 32 35 34 66 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 6d Data Ascii: {"Version":"1.0","Bids":{"2880ccde5b4dbcb":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"81efe7e2-f360-42ab-8fe0-085cfd78254f","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monum
2024-05-21 09:21:32 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:31 GMT content-length: 180 x-envoy-upstream-service-time: 107 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:32 UTC	180	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 32 65 31 30 36 63 39 39 35 39 61 31 37 30 39 39 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 32 65 31 30 36 63 39 39 35 39 61 31 37 30 39 39 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 32 38 38 30 63 63 64 65 35 62 34 64 62 63 62 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"2e106c9959a170994bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"2e106c9959a170994bfb0857db316efd","BidID":"2880ccde5b4dbcb"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.9	49790	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	890	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 2019 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	2019	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 33 32 66 36 63 33 64 34 62 63 64 32 37 38 36 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 34 38 35 36 30 64 31 32 2d 62 39 30 64 2d 34 64 65 61 2d 62 66 62 62 2d 34 30 63 30 30 65 37 66 39 62 38 35 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 2c 31 36 30 78 36 30 30 2c 33 30 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 Data Ascii: {"Version":"1.0","Bids":{"32f6c3d4bcd2786":{"PlacementID":"ffd2f3e5d8d521d3e956b94b85e3cf84","TransactionID":"48560d12-b90d-4dea-bfbb-40c00e7f9b85","Width":300,"Height":250,"AvailableSizes":"300x250,160x600,300x600","SChain":{"ver":"1.0","complete":1,"nod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.9	49775	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	608	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 808 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	808	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 34 38 30 66 61 32 36 66 39 62 30 32 63 61 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 67 70 69 64 22 3a 22 2f 32 30 38 34 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"480fa26f9b02ca","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":1,"gpid":"/2084

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.9	49776	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	608	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 994 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	994	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 36 32 35 35 39 66 64 38 39 33 36 30 32 65 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250},{"width":160,"height":600},{"width":300,"height":600}],"primary_size":{"width":300,"height":250},"ad_types":["video","banner"],"uuid":"62559fd893602e","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.9	49766	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	1167	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289673&to=240&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.9	49769	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	1220	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289738&to=240&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105834&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.9	49768	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	1220	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289739&to=240&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105836&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.9	49767	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	1220	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283289739&to=240&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105835&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.9	49783	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1475 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1475	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 38 39 37 31 35 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283289715,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.9	49784	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:31 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1498 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:31 UTC	1498	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 38 39 37 35 35 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283289755,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.9	49797	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1404	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 37 33 34 66 30 34 2d 62 64 65 35 2d 34 35 36 31 2d 61 35 38 30 2d 36 63 64 64 34 63 37 65 61 39 38 61 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 Data Ascii: {"id":"10734f04-bde5-4561-a580-6cdd4c7ea98a","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.9	49798	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1404	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 37 33 34 66 30 34 2d 62 64 65 35 2d 34 35 36 31 2d 61 35 38 30 2d 36 63 64 64 34 63 37 65 61 39 38 61 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 Data Ascii: {"id":"10734f04-bde5-4561-a580-6cdd4c7ea98a","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.9	49796	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1404	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 37 33 34 66 30 34 2d 62 64 65 35 2d 34 35 36 31 2d 61 35 38 30 2d 36 63 64 64 34 63 37 65 61 39 38 61 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 Data Ascii: {"id":"10734f04-bde5-4561-a580-6cdd4c7ea98a","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.9	49800	35.71.131.137	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	425	OUT	GET /track/rid?ttd_pid=2jqw284&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c
2024-05-21 09:21:32 UTC	354	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json Content-Length: 108 Connection: close server: Kestrel cache-control: private expires: Thu, 20 Jun 2024 09:21:32 GMT set-cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; expires=Wed, 21 May 2025 09:21:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-21 09:21:32 UTC	108	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 64 37 63 35 38 39 66 61 2d 32 34 38 62 2d 34 32 65 30 2d 38 62 63 34 2d 66 66 62 34 62 64 63 33 33 64 35 63 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 54 52 55 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 34 2d 32 31 54 30 39 3a 32 31 3a 33 32 22 7d Data Ascii: {"TDID":"d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-04-21T09:21:32"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.9	49801	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	364	OUT	GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	297	IN	HTTP/1.1 204 No Content content-length: 0 date: Tue, 21 May 2024 09:21:31 GMT x-envoy-upstream-service-time: 25 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.9	49803	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	2754	OUT	GET /trinity.json?key_maker=%7B%2224a8fd48c89b8d%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=f9b21ccc-516b-482c-8d07-46a785a9ff3c&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22a9eff797-27ef-4858-8222-460554f555b8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20li [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uis=1d2b02af-5fab-4505-b4f4-80582e7038de; _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; HAPLB8G=s8558\|Zkxnn
2024-05-21 09:21:32 UTC	663	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:32 GMT content-type: application/json content-length: 425 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-58 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=1d2b02af-5fab-4505-b4f4-80582e7038de; expires=Thu, 20 Jun 2024 09:21:32 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close
2024-05-21 09:21:32 UTC	425	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 32 34 61 38 66 64 34 38 63 38 39 62 38 64 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 Data Ascii: {"slots":{"24a8fd48c89b8d":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/cmf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.9	49802	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	3147	OUT	GET /trinity.json?key_maker=%7B%2244ebe088a5a792a%22%3A%22177369c437c672237248%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%224582bc388aaa7b3%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%2246e8849f03b0374%22%3A%22d23fc2fbe929165f22f9%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=87d04680-5b04-4f64-a7a6-318419b14292&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%229dd37192-48ae-4f98-b6ca-868e1caf908c%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxnn
2024-05-21 09:21:32 UTC	664	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:32 GMT content-type: application/json content-length: 468 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:31 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close
2024-05-21 09:21:32 UTC	468	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 34 34 65 62 65 30 38 38 61 35 61 37 39 32 61 22 3a 7b 7d 2c 22 34 35 38 32 62 63 33 38 38 61 61 61 37 62 33 22 3a 7b 7d 2c 22 34 36 65 38 38 34 39 66 30 33 62 30 33 37 34 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 Data Ascii: {"slots":{"44ebe088a5a792a":{},"4582bc388aaa7b3":{},"46e8849f03b0374":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.9	49808	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	519	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=p.d.l&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2Farticle%2Ftop%2F926%22%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180388 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.9	49806	35.186.253.211	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:32 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.9	49810	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	635	OUT	GET /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
2024-05-21 09:21:32 UTC	557	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 152 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 70 75 62 6c 69 63 2f 68 62 2f 62 69 64 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /public/hb/bid</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.9	49804	162.19.138.119	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	561	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	381	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://custommapposter.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:21:32 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:32 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 33 6f 5a 6b 4f 38 69 78 71 31 47 34 58 56 6b 55 48 68 6b 6d 2b 51 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"3oZkO8ixq1G4XVkUHhkm+Q=="}
2024-05-21 09:21:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.9	49807	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	359	OUT	GET /analytics/1013/pbjs HTTP/1.1 Host: api.id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	377	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers cache-control: max-age=300, public access-control-allow-origin: * content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:21:31 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:32 UTC	76	IN	Data Raw: 34 36 0d 0a 7b 22 69 6e 67 65 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2f 65 76 65 6e 74 22 2c 22 73 61 6d 70 6c 69 6e 67 22 3a 31 30 7d 0d 0a Data Ascii: 46{"ingestUrl":"https://api.id5-sync.com/analytics/event","sampling":10}
2024-05-21 09:21:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.9	49805	162.19.138.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	353	OUT	GET /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	304	IN	HTTP/1.1 400 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding content-type: text/html;charset=utf-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:21:32 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:32 UTC	45	IN	Data Raw: 32 32 0d 0a 70 61 72 74 6e 65 72 20 70 61 72 61 6d 65 74 65 72 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 0d 0a 30 0d 0a 0d 0a Data Ascii: 22partner parameter must not be null0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.9	49812	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2323 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:32 UTC	2323	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:32 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:32 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 66 63 36 31 65 65 66 62 2d 37 34 31 30 2d 34 63 62 30 2d 61 36 65 35 2d 61 38 64 37 66 39 37 61 30 62 31 65 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"fc61eefb-7410-4cb0-a6e5-a8d7f97a0b1e","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.9	49816	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1276	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1676 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:32 UTC	1676	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 30 37 39 36 2c 22 62 69 64 49 64 22 3a 22 38 33 35 65 30 36 61 34 30 36 63 61 32 35 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 34 38 31 34 38 33 36 36 2d 62 38 62 34 2d 34 34 64 61 2d 38 65 37 65 2d 30 62 64 33 62 64 32 38 65 39 66 30 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 31 36 30 78 36 30 30 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283290796,"bidId":"835e06a406ca251","referrer":null,"adUnitCode":"mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["160x600
2024-05-21 09:21:32 UTC	1160	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=oAx14TayQsSWHBkxRkjL0MJMAEnOS0wGFpoMEhiUk4wRWE1eHMKG2RfWGNVTWlFNW54dlxafklcZgdMZksyb3AnCB1gXVlhA09oEmNkfndJVHBdWWMAT2FDYGYpIV1MYFxeYFlPN0tqZ3lgR1pkWF01V0hiS2BkeHVcTWpZWWdQHGhFMmFqbklOYVwLYlEaN0cwYy5wCkkwXFw3VkwzRWV1ZGBdS2UKX2xQQWASMGF8cFxMZlNcMlIcN0Bxe2p0WE8zXVsyVUgwEGVjenVfTGpdDGwEGzNRf3V%2BcVseZllYMFNOZxcxNS51U0xnCAhtWRtzX3Fhe3EIT2QOXGNVT2RCZGApIVMeNglTMVBbfVFlZCwkD0pnWV9gA04wETFneiRaTWFdX2JDJH1RMDg9LB9aaFtGdgYdIQFxbTM%2FR1ohDhknCBY%2FUWl1fCENTGcPC2ZMSzUWN3p4cg8cf10IZwRUNBdqY3kmCE1rU15gQ1VzEDw5JicIDDsEBB0FW2tRZWIqcFpJaw4MNVdKMxAxYyl1WxxnUwg2QwQ%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:32 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 18676 date: Tue, 21 May 2024 09:21:32 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:32 UTC	8621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 0b 93 a3 48 96 2e f8 57 72 ea 5a 56 77 5b 57 56 01 42 21 d4 dd d9 6d ee 0e ce 1b c9 1d dc 79 6c af 95 49 80 00 81 04 21 14 02 69 6c fe fb 9a 2b a2 72 6a aa e7 ee ce 5d 5b db bb 7b ad 95 16 11 7a f0 38 7e dc cf 77 be f3 1d 57 fe eb 77 97 72 7c eb ae e3 77 7f fa df fe f5 bb bc ef db a6 14 cf ff f7 1f be db 15 df fd e9 bb bf fc cb 97 2f 9f 8c 39 af 77 e7 aa fc d3 a7 cd 50 9e 93 4f 7a b8 b5 f5 3f 7d 5a 2e 56 d2 4a 51 25 e9 13 a2 e2 b5 aa bd ac 16 2f d2 4a fe f4 e5 cb 5f ff 52 34 b7 4f 4d f1 f5 77 fb 72 97 f7 e7 9f 97 da fa 65 bd f8 dd a7 f1 7a ef ca af bf 1b fa b1 b9 36 fd f9 4f bb fd d8 77 6f d7 f2 cf 5d 79 b8 fe 49 1a e6 4f 7f be f6 83 78 f2 e7 5b 33 36 fb a6 6b ae f7 3f d5 4d 51 94 e7 3f ff ee af 7f 69 4e d5 a7 f1 92 7f Data Ascii: H.WrZVw[WVB!mylI!il+rj][{z8~wWwr\|w/9wPOz?}Z.VJQ%/J_R4OMwrez6Owo]yIOx[36k?MQ?iN
2024-05-21 09:21:32 UTC	10055	IN	Data Raw: 2d 0b c2 69 f3 c4 87 a3 f0 d2 96 6a ef a8 cc 55 fd 60 2d 07 37 94 78 49 80 56 4a 3c 65 77 ed 18 24 d2 ab 71 6e c1 d3 13 9d 31 bc b3 d8 2d ad 96 20 bc be 23 58 92 2f bc 66 80 25 16 fc fe 00 7d 9f 9d 65 25 4d 3a 81 61 74 6b 51 81 61 6b e7 ee 8f 0e 70 04 9a 2b ae 34 50 97 e4 f2 e6 3e e9 db 4a 7a 75 01 93 8c 73 be cb ef 6c 32 74 95 3c 71 39 9e 6f bb 4a be 89 cc 6e 1c 05 c6 ba 52 ef 1a 31 29 2d 22 5e 65 8f 34 d0 e5 5e 4d ab ca 30 41 d7 3a b3 d6 eb 74 bd b3 25 d6 db f7 6b 05 8f ce 39 80 a9 e3 18 0c 1a 31 5d 1b f1 68 79 73 fa ea c0 ca cc 8f d5 6d 1b b6 1f d9 f3 ba 8d 4f ef f7 72 6b b5 45 c7 e9 0d 4c f8 60 4f 9a fc ce 06 b2 5b 09 f9 0e 24 f3 73 ae c6 9e 2e 5a 73 d3 ac 75 44 8a b5 7d a2 b2 3b fb 31 3d 33 ca e9 3a 73 43 43 da 50 8d 6d 60 3e d9 75 fb 3e aa c5 7c 26 Data Ascii: -ijU`-7xIVJ<ew$qn1- #X/f%}e%M:atkQakp+4P>Jzusl2t<q9oJnR1)-"^e4^M0A:t%k91]hysmOrkEL`O[$s.ZsuD};1=3:sCCPm`>u>\|&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.9	49814	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1196	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1788 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=n2Q13oGt38w0D71YU2FGUEUkoDXiFFQntvaU1xRwddTgh0A1M7ZlELcRdWXEUAJwQGbDcQQ2VBVQtCAyEFCT1iBlt2FwMIRgcgVFRuNlBNa1YFC0BVdQUDa2QKXiIWUQkTA3ECBTtkUFhlWBENEQMhAwFhbFENcENSDkcAdQBSOmEHC3NWHxpCVncCAjwzBAtwQAcJFAB0BgY9NldYJBARFFUGdlFUbGJRDSMSBAoTBHEECWhmBlp2RFIaWxJyAwZvZQpfchZVDUYCJQBSP2wEWXdHBglVHGYBAmtkUF9%2BQgQJRghwAgk6ZAtecxUGDUISGRsTOjpHATNWCQhbEiNTQSt3CBQ6WBFLEkM3Xl43dwhNcRADDEJRfA4cPWBRXmpDAAESHSEPCD14AFl%2BF1IPFVZyD1Vtdx5NJBtdVhJTMF5eNxxWTX1WBQtAVXICBW8xVwwlTAFcQwV2BAc%2FZVRXZQk%3D
2024-05-21 09:21:32 UTC	1788	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 30 37 39 33 2c 22 62 69 64 49 64 22 3a 22 37 37 39 65 65 63 30 30 64 63 37 32 63 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 34 38 31 34 38 33 36 36 2d 62 38 62 34 2d 34 34 64 61 2d 38 65 37 65 2d 30 62 64 33 62 64 32 38 65 39 66 30 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 73 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283290793,"bidId":"779eec00dc72cd","referrer":null,"adUnitCode":"mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"","s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.9	49819	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	663	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:32 UTC	3335	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:32 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:32 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:32 GMT x-envoy-upstream-service-time: 1 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 63 37 38 62 37 37 32 36 2d 39 34 61 35 2d 34 39 61 35 2d 62 62 66 38 2d 32 35 63 37 32 61 32 38 33 39 66 38 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"c78b7726-94a5-49a5-bbf8-25c72a2839f8","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.9	49811	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:32 UTC	2584	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:32 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:32 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 66 66 35 64 65 37 63 32 2d 61 61 64 34 2d 34 66 39 63 2d 39 63 64 61 2d 61 38 35 64 32 38 64 31 30 36 34 33 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"ff5de7c2-aad4-4f9c-9cda-a85d28d10643","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.9	49809	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1716283291_1716283291; amuid2=8513443a-0aff-42a8-b16a-97f4fac4a87a; sd_amuid2=8513443a-0aff-42a8-b16a-97f4fac4a87a
2024-05-21 09:21:32 UTC	265	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:21:32 GMT server: envoy vary: accept-encoding x-envoy-upstream-service-time: 0 connection: close
2024-05-21 09:21:32 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.9	49826	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	663	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3330 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:32 UTC	3330	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:32 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:32 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:31 GMT x-envoy-upstream-service-time: 2 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 30 32 35 38 38 62 39 61 2d 35 36 32 31 2d 34 38 66 65 2d 38 33 38 32 2d 65 63 38 61 32 38 38 32 63 63 64 36 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"02588b9a-5621-48fe-8382-ec8a2882ccd6","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.9	49832	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2324 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:32 UTC	2324	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:32 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:32 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 65 31 63 36 31 32 61 31 2d 61 33 37 64 2d 34 32 38 33 2d 39 35 33 61 2d 37 32 37 30 32 66 65 37 32 35 38 34 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"e1c612a1-a37d-4283-953a-72702fe72584","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.9	49836	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	699	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7660f095-8567-4e13-b266-ede79c1f7a19&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180384 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.9	49823	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	3060	OUT	GET /trinity.json?key_maker=%7B%22797a0307fc4bf82%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=4e23170f-2d7a-4872-909a-a411aabc008d&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22c78b7726-94a5-49a5-bbf8-25c72a2839f8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20A [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxnn
2024-05-21 09:21:32 UTC	672	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:32 GMT content-type: application/json content-length: 426 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:31 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close
2024-05-21 09:21:32 UTC	426	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 37 39 37 61 30 33 30 37 66 63 34 62 66 38 32 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d Data Ascii: {"slots":{"797a0307fc4bf82":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/cm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.9	49837	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	3061	OUT	GET /trinity.json?key_maker=%7B%2210162a92428bf608%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3709d71a-8b92-4e14-acfc-4968aee94daf&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%2202588b9a-5621-48fe-8382-ec8a2882ccd6%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20 [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxnn
2024-05-21 09:21:32 UTC	672	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:32 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:31 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close
2024-05-21 09:21:32 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 30 31 36 32 61 39 32 34 32 38 62 66 36 30 38 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"10162a92428bf608":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.9	49828	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1276	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1678 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:32 UTC	1678	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 30 38 36 36 2c 22 62 69 64 49 64 22 3a 22 31 30 35 65 34 63 31 64 35 64 35 37 64 63 66 61 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 34 38 31 34 38 33 36 36 2d 62 38 62 34 2d 34 34 64 61 2d 38 65 37 65 2d 30 62 64 33 62 64 32 38 65 39 66 30 5f 32 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 31 36 30 78 36 30 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283290866,"bidId":"105e4c1d5d57dcfa","referrer":null,"adUnitCode":"mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["160x60
2024-05-21 09:21:33 UTC	1195	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:32 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 22684 date: Tue, 21 May 2024 09:21:32 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:33 UTC	14057	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 09 93 a3 48 b6 26 fa 57 f2 a6 bd 50 67 4d 75 44 b1 4a a8 aa d5 6d ce 26 40 02 89 55 a0 c9 31 19 9b 00 b1 06 20 01 ea 57 f1 db c7 1c 14 b9 d4 72 bb af d9 d8 d8 b3 79 13 69 0a 39 be 1e 3f 7e ce 77 16 27 f2 9f 1f eb b0 b9 66 6d f3 f1 e7 ff fe cf 8f 7e 59 a6 49 08 cb ff e3 af 1f dd e0 e3 cf 1f ff f6 1f cf cf 1f b8 de 8f dd 22 0a 7f fe b0 ab c2 c2 fe c0 ea 7b 91 fd f9 03 49 90 f3 e5 12 c7 c8 0f 8c 06 9f 89 05 82 20 14 42 21 73 7c 89 2f 11 04 9d 23 c8 1c 81 3f 04 fc fe f0 fc fc f7 bf 05 c9 ed 43 12 ac fe e2 85 ae 5f 16 a7 39 85 91 f3 e5 5f 3e 34 ed 90 85 ab bf 54 65 93 b4 49 59 fc ec 7a 4d 99 5d db f0 97 2c 3c b7 3f 23 55 ff e1 97 b6 ac 60 e1 97 5b d2 24 5e 92 25 ed f0 73 9c 04 41 58 fc f2 97 bf ff 2d c9 a3 0f 4d ed af fe 12 Data Ascii: H&WPgMuDJm&@U1 Wryi9?~w'fm~YI"{I B!s\|/#?C_9_>4TeIYzM],<?#U`[$^%sAX-M
2024-05-21 09:21:33 UTC	2917	IN	Data Raw: 8c c9 af c7 f8 06 4a 2b 6b 80 66 6f 38 57 0e d5 50 af 57 17 7c 07 6e 52 6c 21 61 76 84 5e 1b b2 a7 01 ad 5c b8 3b cc 0c 88 7d 7f 0b 71 8e 66 2e ea eb 46 87 d2 aa d6 d0 a2 d1 11 71 93 87 a6 d9 82 a5 19 1c 46 2b 73 94 ee dc 13 46 6f 99 08 ac e1 cd 82 0e e5 ce c9 24 c3 cf 61 66 60 33 ae 4f 03 a7 81 31 c0 86 56 f9 dd 20 ce f7 91 7a 96 93 8e 94 75 c2 38 30 5d b2 2b 46 bd bd 6d ee dd 95 bb 53 f5 6f 74 90 0f 8a ec a2 58 9a eb 0f 4e ed 33 a4 ce 09 f0 fd c3 51 07 bf f1 74 68 56 e9 6d e4 1b df ad 20 2f 4e 86 da fe 10 3c 61 bc 24 c4 9a 26 f8 cd 71 7d 84 b8 82 88 03 d7 d0 40 6a 03 dc ca ac ec b8 90 70 b1 d8 f0 40 df 26 d9 cd 89 8e 30 83 bf 08 8a ea a8 09 23 2f 0e 2c e3 b7 9b bb 9f b0 97 77 fa ba 3c b0 d1 ee 8c d2 fc 59 6f 06 07 04 8e 38 f8 b7 33 43 00 75 20 ea 09 21 Data Ascii: J+kfo8WPW\|nRl!av^\;}qf.FqF+sFo$af`3O1V zu80]+FmSotXN3QthVm /N<a$&q}@jp@&0#/,w<Yo83Cu !
2024-05-21 09:21:33 UTC	5710	IN	Data Raw: 70 77 46 b9 de c1 b2 7b 16 4e 0f 8b 80 e3 27 0f 71 b4 27 be d1 a3 9a 87 9a 55 38 c6 03 15 7c 55 f1 cb 4c 56 2c df 4c a6 ba 2e ce 0d d5 b3 96 96 09 46 7b 4b 49 3e b8 22 8b cc 55 5e b5 5e 3a 62 7b 42 09 a2 8b 7b 6c 50 8b ae 17 bf 73 0c ef 7a 12 8f cd ff ab de b6 fa 55 87 bf 31 67 dc f0 b6 8e 5c 33 c7 d8 bc a7 32 b2 b8 92 be 98 ea 8d 21 c1 4c 5d f1 c2 c7 1f 26 de aa 80 b5 3f 30 9c 83 1d 7a c6 a5 25 53 82 f1 f9 dc de 5f cc 78 0d e8 a2 04 9d 66 2b 8a 16 56 ea 53 29 fd 3d 8b 5f d6 2b 4f 96 cf 66 0c 9f 33 e5 e6 53 45 20 ae d4 58 98 f2 dc 99 fa 57 34 6e f3 ef f8 d4 cd 7c c1 54 bd b4 9b c6 23 90 9b 06 79 33 fd 4d 82 a6 cd da ab 42 11 df 60 ce db 45 9b b8 e8 b8 32 c2 66 e2 8b 5f 8f c5 36 f8 d6 fa fa 8b 7a 0b 91 72 97 52 2d 8c d5 c9 5b 9d db e1 0e 24 fe 7e 99 cd 71 Data Ascii: pwF{N'q'U8\|ULV,L.F{KI>"U^^:b{B{lPszU1g\32!L]&?0z%S_xf+VS)=_+Of3SE XW4n\|T#y3MB`E2f_6zrR-[$~q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.9	49840	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	699	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=c992f38f-79ee-483b-a206-98cc8db521aa&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180388 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.9	49827	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1196	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1791 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=n2Q13oGt38w0D71YU2FGUEUkoDXiFFQntvaU1xRwddTgh0A1M7ZlELcRdWXEUAJwQGbDcQQ2VBVQtCAyEFCT1iBlt2FwMIRgcgVFRuNlBNa1YFC0BVdQUDa2QKXiIWUQkTA3ECBTtkUFhlWBENEQMhAwFhbFENcENSDkcAdQBSOmEHC3NWHxpCVncCAjwzBAtwQAcJFAB0BgY9NldYJBARFFUGdlFUbGJRDSMSBAoTBHEECWhmBlp2RFIaWxJyAwZvZQpfchZVDUYCJQBSP2wEWXdHBglVHGYBAmtkUF9%2BQgQJRghwAgk6ZAtecxUGDUISGRsTOjpHATNWCQhbEiNTQSt3CBQ6WBFLEkM3Xl43dwhNcRADDEJRfA4cPWBRXmpDAAESHSEPCD14AFl%2BF1IPFVZyD1Vtdx5NJBtdVhJTMF5eNxxWTX1WBQtAVXICBW8xVwwlTAFcQwV2BAc%2FZVRXZQk%3D
2024-05-21 09:21:32 UTC	1791	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 30 38 36 35 2c 22 62 69 64 49 64 22 3a 22 31 30 33 65 65 30 34 31 34 31 63 33 33 36 33 38 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 34 38 31 34 38 33 36 36 2d 62 38 62 34 2d 34 34 64 61 2d 38 65 37 65 2d 30 62 64 33 62 64 32 38 65 39 66 30 5f 32 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283290865,"bidId":"103ee04141c33638","referrer":null,"adUnitCode":"mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"",
2024-05-21 09:21:32 UTC	1088	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_3646a4db=4GO13tj3WhEj2HICFfD0hDNhoxBFc6OmF8PVZcAGMNfFICfCshdQUQXFAyDHdaUXt%2BdiREWEgGMVtwWVd6cSdxUkBbUGdYdF1WKyx0JQRWRhFhW3IPA3p7cXdeRQ9RNVkhWQd9fSF3BENIH3VdI1lXfHl7fwUWXQQ2XnVaA38qIHJTEF4Re0pwDAF9eiYgUBBdB2NZJloCeX4nJQNDCVd1RGdcBn9%2Fc35WQQhVYll3CwUrL3pwUERZBmZKaUgEe3tyJFZNXARmWX1eB3Aqcn9XQAsGYl1nRhB%2BeyUjU0MJUTMOclhWfHxwfldHXgZmWCRIb2RrICkTGh4RbVhpSFUsOTFkXA8XH3UbIBlBISYtZFxWXFdnXHALCnFkJ3MFRUcEZFEgR1dwcCdrVEJTUDZfJwwEcC13ZEpWCVw5BiAJRiEmLQ8CVlARYVtyDwR9fXUiAxcIC2UMcV8Ae38ldgBMSE4%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:36:32 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 26568 date: Tue, 21 May 2024 09:21:32 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:32 UTC	14164	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 89 73 a3 48 d6 2f fa af 78 1c cf 6a fb 56 d9 cd aa a5 6a d4 13 c9 26 81 04 12 bb d0 78 42 81 00 01 62 35 20 81 d4 53 fe db 5f 24 48 b6 ab aa 7b 66 ee 17 f7 c5 bb f7 bd af 3a da 22 b7 c3 c9 3c 27 7f 67 c9 94 7e bf 2d bc f2 10 57 e5 ed 97 bf ff 7e eb 64 59 14 7a f0 f9 1f 9f 6f 6d f7 f6 cb ed 5f ff f2 f8 78 43 17 9e 5d 85 47 ef 86 20 11 84 c0 89 d1 e0 a6 f4 8a a3 e7 de 6c 4f 37 a2 97 6c bd e2 06 45 87 43 ec e6 18 da 37 20 cf 25 af 39 94 37 8f 8f bf fd d5 0d 8f 37 a1 3b 7e be 4d 52 af 7a 3c 56 7e f5 48 22 3b c4 1e 0e 09 64 8b d8 38 8a 23 83 c1 ce 46 fa 43 d4 f5 ec 11 b1 b3 c9 e7 db df fe 5a 3a 45 98 57 97 91 12 4d 3f df de c4 76 ea 1f 6c df 1b 3f df ee ed a3 dd f5 78 be fd 6d b3 d9 ba 76 65 8f 9f 6f 4b 17 bb c3 99 f4 10 c7 Data Ascii: sH/xjVj&xBb5 S_$H{f:"<'g~-W~dYzom_xC]G lO7lEC7 %977;~MRz<V~H";d8#FCZ:EWM?vl?xmveoK
2024-05-21 09:21:32 UTC	2119	IN	Data Raw: b3 34 21 a6 f1 6c 4d 81 0f 9e 71 a3 1c cc 60 2d 03 1c 65 57 74 7c da 9d 46 c0 02 e8 92 8a 95 93 5c 53 d0 33 4e 59 4d 17 60 8c 29 28 52 b1 3c f1 a3 a5 01 a3 10 5f 86 5a b7 3d f1 d5 ec 64 4d 67 08 b9 95 65 80 4d d8 21 21 ec 51 98 13 39 4e 1b 56 9a 29 42 ea a5 02 d1 6a 50 e3 9b 0c 03 38 d9 8c c9 ad 52 ef a1 95 a5 6a e7 34 8d cb d6 8e 71 d3 36 0a 61 66 b2 bb e6 43 39 80 be 27 8c 99 39 9a e5 34 9a f7 e7 a1 01 ed 18 f4 01 6a d6 70 c8 39 d4 ee 7d cd 4c 7c 7e 3e 8b 75 da 56 41 7f e1 cb 38 50 32 9a dd cb 96 7a 1e 26 4b d3 d1 a4 9a 83 91 0b c2 45 d9 cb 3c 6d 79 8b 85 c6 30 db fd 7a 1a 1e 44 4a 7f 11 14 89 32 27 6b 8a c6 c5 d8 5b d5 c6 d2 18 2d 0c d4 0a 15 1f ed 0b 21 39 64 f7 99 a4 c5 1c b0 39 83 5f 86 ec 9e 07 62 fd 11 7f 3c ba 99 6c 8d 80 02 b2 d4 b0 72 fd c2 a7 Data Ascii: 4!lMq`-eWt\|F\S3NYM`)(R<_Z=dMgeM!!Q9NV)BjP8Rj4q6afC9'94jp9}L\|~>uVA8P2z&KE<my0zDJ2'k[-!9d9_b<lr
2024-05-21 09:21:33 UTC	10285	IN	Data Raw: 5a 9b 9e fb d0 c4 90 f7 02 83 ee ad ac 95 ef 38 86 25 69 6d c3 6e 58 70 4e c8 82 ad 59 30 a5 b8 ee c2 b0 22 83 57 93 e5 a6 b1 2b 5b d9 73 e5 11 5c a6 ff c2 74 ff 1f c4 74 d3 55 4f f7 17 11 22 98 7e 62 ba ed 2b 36 a6 94 12 4c cf 8c 17 e5 3a bf 9f 1b a7 d2 9b ad ce 6a 10 27 b1 44 9b d2 87 13 7a 74 1b a2 b0 17 d2 77 8b 44 19 e8 55 0b 28 70 4e c5 14 1c cb 9b 7f 2f 99 d8 70 e8 70 6e c1 83 cc e3 ed 50 14 cf 9c dc 17 8e da 6c fc 27 ca 6f 40 24 63 04 a4 4e 98 8b 83 08 a4 e5 41 a4 f7 40 46 4a 69 79 e6 48 b0 01 b6 95 b4 ca c2 5c 50 5d 03 08 25 0e 84 26 63 c4 d1 6c 65 15 e8 9b 58 57 d8 92 4b 85 0b 8b cc 80 d8 2a b8 45 fd 92 af dc 24 ca f8 b4 3c 57 b7 2f d2 f2 e4 3d 83 6b 3b 0d eb 65 17 58 30 a2 58 17 92 e5 ee ba e0 32 ee ac 07 83 b8 f2 43 77 a4 be 77 c1 95 5b 6d d5 Data Ascii: Z8%imnXpNY0"W+[s\ttUO"~b+6L:j'DztwDU(pN/ppnPl'o@$cNA@FJiyH\P]%&cleXWK*E$<W/=k;eX0X2Cww[m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.9	49833	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:32 UTC	2585	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:32 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:32 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:32 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 66 30 66 65 30 32 31 30 2d 33 39 61 62 2d 34 32 32 35 2d 61 37 65 35 2d 61 31 63 62 37 64 30 38 31 33 63 30 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"f0fe0210-39ab-4225-a7e5-a1cb7d0813c0","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.9	49841	147.182.216.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1015	OUT	GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:32 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:21:32 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.9	49817	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	2294	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 39 30 37 39 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 38 35 30 61 35 38 35 31 30 33 38 39 66 61 37 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 36 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 23 72 65 70 65 Data Ascii: {"id":"1716283290797","at":1,"cur":["USD"],"imp":[{"id":"850a58510389fa7","tagid":"1433176","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F#repe
2024-05-21 09:21:32 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:31 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.9	49815	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3338 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1716283291_1716283291; amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:21:32 UTC	3338	OUT	Data Raw: 7b 22 61 22 3a 22 64 31 33 38 38 37 36 34 2d 34 35 64 36 2d 34 33 30 39 2d 62 36 36 32 2d 32 61 39 66 64 66 37 35 30 66 30 35 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"d1388764-45d6-4309-b662-2a9fdf750f05","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:32 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:32 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=2_1716283291_1716283292; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:32 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:21:32 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 5a 44 45 7a 4f 44 67 33 4e 6a 51 74 4e 44 56 6b 4e 69 30 30 4d 7a 41 35 4c 57 49 32 4e 6a 49 74 4d 6d 45 35 5a Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkZDEzODg3NjQtNDVkNi00MzA5LWI2NjItMmE5Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.9	49821	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	608	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 941 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	941	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 39 35 65 64 38 63 37 64 32 32 31 37 64 61 39 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 67 Data Ascii: {"tags":[{"sizes":[{"width":160,"height":600}],"primary_size":{"width":160,"height":600},"ad_types":["video","banner"],"uuid":"95ed8c7d2217da9","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"g
2024-05-21 09:21:32 UTC	977	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json; charset=utf-8 Content-Length: 139 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 9ee913a6-cf13-4da7-a354-f1a6bf5d3b04 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:32 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:32 UTC	139	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 39 35 65 64 38 63 37 64 32 32 31 37 64 61 39 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 33 35 35 31 31 35 31 39 36 37 32 37 33 37 37 30 39 39 32 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"95ed8c7d2217da9","tag_id":32542723,"auction_id":"3551151967273770992","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.9	49820	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	890	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1373 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1373	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 39 33 36 36 37 61 37 39 34 33 35 65 32 39 33 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 37 35 31 31 64 36 38 64 2d 35 62 36 31 2d 34 39 32 64 2d 61 66 63 30 2d 36 36 33 64 31 62 31 38 62 62 30 66 22 2c 22 57 69 64 74 68 22 3a 31 36 30 2c 22 48 65 69 67 68 74 22 3a 36 30 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 31 36 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e Data Ascii: {"Version":"1.0","Bids":{"93667a79435e293":{"PlacementID":"210a38a5ef434f943203dcfa1a13deed","TransactionID":"7511d68d-5b61-492d-afc0-663d1b18bb0f","Width":160,"Height":600,"AvailableSizes":"160x600","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mon
2024-05-21 09:21:33 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=f45eddbd1c7299bf9fbebfc2482520f7; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:32 GMT content-length: 180 x-envoy-upstream-service-time: 85 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:33 UTC	180	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 34 61 39 32 61 30 61 35 66 35 30 61 62 37 31 61 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 34 61 39 32 61 30 61 35 66 35 30 61 62 37 31 61 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 42 69 64 49 44 22 3a 22 39 33 36 36 37 61 37 39 34 33 35 65 32 39 33 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"4a92a0a5f50ab71a210a38a5ef434f94","Placement":"210a38a5ef434f943203dcfa1a13deed","CreativeID":"4a92a0a5f50ab71a210a38a5ef434f94","BidID":"93667a79435e293"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.9	49818	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1480	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 39 30 38 30 30 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283290800,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:21:32 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json Content-Length: 84 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:21:32 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 38 38 32 38 34 66 37 62 63 31 64 31 33 61 66 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"88284f7bc1d13af","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.9	49822	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1200	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290788&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	626	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 470 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:32 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Set-Cookie: vst=e_cabbca77-add4-4919-8833-9161c9af2954; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:32 GMT; Path=/; Secure; SameSite=None Timing-Allow-Origin: *
2024-05-21 09:21:32 UTC	470	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 63 61 62 62 63 61 37 37 2d 61 64 64 34 2d 34 39 31 39 2d 38 38 33 33 2d 39 31 36 31 63 39 61 66 32 39 35 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 6e 75 6c 6c 2c 22 6c 61 62 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_cabbca77-add4-4919-8833-9161c9af2954&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":null,"lab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.9	49825	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1480	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 39 30 38 36 31 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283290861,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:21:32 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json Content-Length: 84 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:21:32 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 39 36 30 34 65 35 30 32 31 62 61 38 64 37 36 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"9604e5021ba8d76","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.9	49830	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	608	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 942 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	942	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 31 31 31 39 65 62 33 63 39 32 37 37 61 65 31 38 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 Data Ascii: {"tags":[{"sizes":[{"width":160,"height":600}],"primary_size":{"width":160,"height":600},"ad_types":["video","banner"],"uuid":"1119eb3c9277ae18","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"
2024-05-21 09:21:32 UTC	977	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json; charset=utf-8 Content-Length: 140 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 464ac4d8-3f47-4b16-af16-0f99bc27c8fe Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:32 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:32 UTC	140	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 31 31 31 39 65 62 33 63 39 32 37 37 61 65 31 38 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 38 34 39 33 32 35 39 34 39 37 37 39 30 37 33 36 31 31 32 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"1119eb3c9277ae18","tag_id":32542723,"auction_id":"8493259497790736112","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.9	49829	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3339 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1716283291_1716283291; amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:21:32 UTC	3339	OUT	Data Raw: 7b 22 61 22 3a 22 37 63 64 39 63 61 32 35 2d 39 35 63 61 2d 34 34 34 33 2d 38 63 36 62 2d 37 36 32 37 62 66 65 61 34 30 63 66 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"7cd9ca25-95ca-4443-8c6b-7627bfea40cf","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:32 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:32 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=2_1716283291_1716283292; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:32 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:21:32 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4e 32 4e 6b 4f 57 4e 68 4d 6a 55 74 4f 54 56 6a 59 53 30 30 4e 44 51 7a 4c 54 68 6a 4e 6d 49 74 4e 7a 59 79 4e Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkN2NkOWNhMjUtOTVjYS00NDQzLThjNmItNzYyN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.9	49834	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	2294	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 39 30 38 37 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 31 37 63 32 37 36 31 38 65 39 38 66 64 63 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 36 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 23 72 65 70 65 Data Ascii: {"id":"1716283290877","at":1,"cur":["USD"],"imp":[{"id":"117c27618e98fdc","tagid":"1433176","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F#repe
2024-05-21 09:21:33 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.9	49838	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1200	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290870&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	626	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 470 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:32 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Set-Cookie: vst=e_de846181-f60c-4b86-806e-43df382fb3f3; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:32 GMT; Path=/; Secure; SameSite=None Timing-Allow-Origin: *
2024-05-21 09:21:33 UTC	470	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 64 65 38 34 36 31 38 31 2d 66 36 30 63 2d 34 62 38 36 2d 38 30 36 65 2d 34 33 64 66 33 38 32 66 62 33 66 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 6e 75 6c 6c 2c 22 6c 61 62 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_de846181-f60c-4b86-806e-43df382fb3f3&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":null,"lab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.9	49835	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1374 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:32 UTC	1374	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 32 31 38 34 61 39 33 30 31 66 36 64 38 36 33 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 38 66 36 37 39 62 65 31 2d 33 33 65 32 2d 34 63 37 30 2d 62 31 31 62 2d 66 62 36 64 34 38 36 35 39 39 32 32 22 2c 22 57 69 64 74 68 22 3a 31 36 30 2c 22 48 65 69 67 68 74 22 3a 36 30 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 31 36 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"12184a9301f6d863":{"PlacementID":"210a38a5ef434f943203dcfa1a13deed","TransactionID":"8f679be1-33e2-4c70-b11b-fb6d48659922","Width":160,"Height":600,"AvailableSizes":"160x600","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:21:33 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:32 GMT content-length: 181 x-envoy-upstream-service-time: 97 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:33 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 38 31 65 31 37 35 62 34 34 31 39 66 35 31 35 33 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 38 31 65 31 37 35 62 34 34 31 39 66 35 31 35 33 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 42 69 64 49 44 22 3a 22 31 32 31 38 34 61 39 33 30 31 66 36 64 38 36 33 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"81e175b4419f5153210a38a5ef434f94","Placement":"210a38a5ef434f943203dcfa1a13deed","CreativeID":"81e175b4419f5153210a38a5ef434f94","BidID":"12184a9301f6d863"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.9	49831	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1404	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 31 61 37 39 38 35 35 2d 61 34 39 34 2d 34 65 34 63 2d 39 61 34 62 2d 34 33 38 65 32 64 39 61 66 65 61 61 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 Data Ascii: {"id":"21a79855-a494-4e4c-9a4b-438e2d9afeaa","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-f
2024-05-21 09:21:32 UTC	181	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:32 GMT Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.9	49847	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	364	OUT	GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	296	IN	HTTP/1.1 204 No Content content-length: 0 date: Tue, 21 May 2024 09:21:32 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.9	49845	172.64.144.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	568	OUT	GET /gptprebidnative/202403121239/wrap.js HTTP/1.1 Host: cdn.confiant-integrations.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	567	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: z4G4h//5NRdot7JcsoYVtgaGxZtQMnS82qxCjfG0e4e9NWEwMWSNdrrxO2uh6YYh0CvjJ7w9eGk= x-amz-request-id: WJZRTV92VB1K3WFX Last-Modified: Tue, 12 Mar 2024 16:41:24 GMT ETag: W/"c1e08625d829bb0007d3c12ed83ad1cb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 CF-Cache-Status: HIT Age: 4110369 Server: cloudflare CF-RAY: 88737f351eb20cbc-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:33 UTC	802	IN	Data Raw: 37 64 37 39 0d 0a 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 73 70 61 63 65 64 2d 63 6f 6d 6d 65 6e 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 27 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 33 2d 32 30 32 34 20 43 6f 6e 66 69 61 6e 74 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 27 3b 0a 20 20 27 76 33 2e 32 30 32 34 30 33 31 32 31 32 33 39 27 3b 0a 20 20 76 61 72 20 63 6f 6e 66 69 61 6e 74 43 6f 6d 6d 6f 6e 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 65 78 70 6f 72 74 73 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 61 63 37 38 62 2c 5f 30 78 34 39 62 35 32 63 29 7b 76 61 72 20 5f 30 78 38 30 62 62 65 32 3d 5f 30 Data Ascii: 7d79/* eslint-disable spaced-comment */(function() { 'Copyright 2013-2024 Confiant Inc. All rights reserved.'; 'v3.202403121239'; var confiantCommon = (function (exports) { 'use strict'; (function(_0x3ac78b,_0x49b52c){var _0x80bbe2=_0
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 2c 30 78 31 39 34 64 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 61 6e 74 54 72 79 54 6f 47 65 74 43 6f 6e 66 69 67 28 5f 30 78 32 34 38 36 37 38 29 7b 76 61 72 20 5f 30 78 34 64 31 34 37 65 3d 5f 30 78 33 66 66 61 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 36 39 37 32 31 35 28 5f 30 78 31 32 31 38 66 38 2c 5f 30 78 34 35 65 64 33 35 29 7b 72 65 74 75 72 6e 20 21 21 28 5f 30 78 31 32 31 38 66 38 26 26 5f 30 78 34 35 65 64 33 35 26 26 5f 30 78 31 32 31 38 66 38 5b 5f 30 78 34 35 65 64 33 35 5d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 38 34 62 66 61 28 29 7b 76 61 72 20 5f 30 78 33 39 35 66 37 65 3d 5f 30 78 33 66 66 61 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 39 35 66 37 65 28 30 78 61 38 29 5d 3f 64 6f 63 75 6d 65 6e 74 Data Ascii: ,0x194d1));function confiantTryToGetConfig(_0x248678){var _0x4d147e=_0x3ffa;function _0x697215(_0x1218f8,_0x45ed35){return !!(_0x1218f8&&_0x45ed35&&_0x1218f8[_0x45ed35]);}function _0x584bfa(){var _0x395f7e=_0x3ffa;return document[_0x395f7e(0xa8)]?document
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 39 65 66 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 3a 5f 30 78 31 31 33 32 66 36 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 29 3b 69 66 28 5f 30 78 34 36 33 31 32 39 29 7b 69 66 28 21 5f 30 78 34 36 33 31 32 39 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 29 74 72 79 7b 5f 30 78 34 33 30 37 30 31 3d 77 69 6e 64 6f 77 5b 5f 30 78 34 64 31 34 37 65 28 30 78 61 35 29 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 66 29 5d 2c 5f 30 78 34 36 33 31 32 39 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 3d 5f 30 78 34 33 30 37 30 31 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 3b 7d 63 61 74 63 68 28 5f 30 78 34 37 39 33 63 39 29 7b 7d 72 65 74 75 72 6e 20 5f 30 78 34 36 33 31 32 Data Ascii: 9ef][_0x4d147e(0xb0)]:_0x1132f6[_0x4d147e(0xb0)]);if(_0x463129){if(!_0x463129[_0x4d147e(0xbb)])try{_0x430701=window[_0x4d147e(0xa5)][_0x4d147e(0xbf)],_0x463129[_0x4d147e(0xbb)]=_0x430701[_0x4d147e(0xb0)][_0x4d147e(0xbb)];}catch(_0x4793c9){}return _0x46312
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 39 30 62 30 64 5b 30 78 30 5d 2c 5f 30 78 35 38 62 30 36 61 3d 5f 30 78 33 66 66 61 39 64 2b 5f 30 78 33 39 30 66 37 31 2c 5f 30 78 33 61 37 37 61 65 3d 5f 30 78 32 35 61 33 62 39 5b 5f 30 78 35 38 62 30 36 61 5d 3b 72 65 74 75 72 6e 20 21 5f 30 78 33 61 37 37 61 65 3f 28 5f 30 78 37 36 63 63 35 65 3d 5f 30 78 33 66 66 61 5b 27 58 67 4e 63 50 73 27 5d 28 5f 30 78 37 36 63 63 35 65 29 2c 5f 30 78 32 35 61 33 62 39 5b 5f 30 78 35 38 62 30 36 61 5d 3d 5f 30 78 37 36 63 63 35 65 29 3a 5f 30 78 37 36 63 63 35 65 3d 5f 30 78 33 61 37 37 61 65 2c 5f 30 78 37 36 63 63 35 65 3b 7d 2c 5f 30 78 33 66 66 61 28 5f 30 78 32 35 61 33 62 39 2c 5f 30 78 34 32 66 63 32 64 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 30 62 28 29 7b 76 61 72 20 5f 30 78 32 61 65 35 39 Data Ascii: 90b0d[0x0],_0x58b06a=_0x3ffa9d+_0x390f71,_0x3a77ae=_0x25a3b9[_0x58b06a];return !_0x3a77ae?(_0x76cc5e=_0x3ffa['XgNcPs'](_0x76cc5e),_0x25a3b9[_0x58b06a]=_0x76cc5e):_0x76cc5e=_0x3a77ae,_0x76cc5e;},_0x3ffa(_0x25a3b9,_0x42fc2d);}function _0x190b(){var _0x2ae59
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 31 30 34 30 66 30 2a 30 78 34 30 2b 5f 30 78 34 62 63 36 66 36 3a 5f 30 78 34 62 63 36 66 36 2c 5f 30 78 33 31 39 33 63 64 2b 2b 25 30 78 34 29 3f 5f 30 78 31 65 61 35 30 39 2b 3d 53 74 72 69 6e 67 5b 27 66 72 6f 6d 43 68 61 72 43 6f 64 65 27 5d 28 30 78 66 66 26 5f 30 78 31 30 34 30 66 30 3e 3e 28 2d 30 78 32 2a 5f 30 78 33 31 39 33 63 64 26 30 78 36 29 29 3a 30 78 30 29 7b 5f 30 78 34 62 63 36 66 36 3d 5f 30 78 32 36 63 34 31 32 5b 27 69 6e 64 65 78 4f 66 27 5d 28 5f 30 78 34 62 63 36 66 36 29 3b 7d 66 6f 72 28 76 61 72 20 5f 30 78 33 30 34 33 37 31 3d 30 78 30 2c 5f 30 78 34 36 37 31 36 31 3d 5f 30 78 31 65 61 35 30 39 5b 27 6c 65 6e 67 74 68 27 5d 3b 5f 30 78 33 30 34 33 37 31 3c 5f 30 78 34 36 37 31 36 31 3b 5f 30 78 33 30 34 33 37 31 2b 2b 29 7b 5f Data Ascii: 1040f00x40+_0x4bc6f6:_0x4bc6f6,_0x3193cd++%0x4)?_0x1ea509+=String['fromCharCode'](0xff&_0x1040f0>>(-0x2_0x3193cd&0x6)):0x0){_0x4bc6f6=_0x26c412['indexOf'](_0x4bc6f6);}for(var _0x304371=0x0,_0x467161=_0x1ea509['length'];_0x304371<_0x467161;_0x304371++){_
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 30 78 34 61 61 36 39 61 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 30 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 65 61 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 34 29 5d 3b 7d 63 61 74 63 68 28 5f 30 78 31 30 34 30 66 30 29 7b 7d 69 66 28 5f 30 78 31 65 61 35 30 39 29 72 65 74 75 72 6e 20 5f 30 78 31 65 61 35 30 39 3b 74 72 79 7b 76 61 72 20 5f 30 78 32 64 63 37 66 31 3d 30 78 30 2c 5f 30 78 33 31 39 33 63 64 3d 5f 30 78 34 61 61 36 39 61 3b 77 68 69 6c 65 28 21 5f 30 78 33 31 39 33 63 64 5b 5f 30 78 33 39 37 66 62 37 28 30 78 65 61 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 34 29 5d 26 26 5f 30 78 33 31 39 33 63 64 21 3d 3d 5f 30 78 34 61 61 36 39 61 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 30 29 5d 29 7b 69 66 28 5f 30 78 32 64 63 37 66 31 Data Ascii: 0x4aa69a[_0x397fb7(0xf0)][_0x397fb7(0xea)][_0x397fb7(0xf4)];}catch(_0x1040f0){}if(_0x1ea509)return _0x1ea509;try{var _0x2dc7f1=0x0,_0x3193cd=_0x4aa69a;while(!_0x3193cd[_0x397fb7(0xea)][_0x397fb7(0xf4)]&&_0x3193cd!==_0x4aa69a[_0x397fb7(0xf0)]){if(_0x2dc7f1
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 3b 7d 0a 0a 20 20 20 20 76 61 72 20 5f 30 78 34 35 34 66 39 36 3d 5f 30 78 35 33 63 34 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 33 63 34 28 5f 30 78 31 61 61 39 33 33 2c 5f 30 78 32 39 33 61 66 64 29 7b 76 61 72 20 5f 30 78 32 34 32 64 36 35 3d 5f 30 78 32 34 32 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 33 63 34 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 33 63 34 32 33 2c 5f 30 78 31 63 62 37 30 61 29 7b 5f 30 78 35 33 63 34 32 33 3d 5f 30 78 35 33 63 34 32 33 2d 30 78 39 65 3b 76 61 72 20 5f 30 78 34 36 37 64 65 66 3d 5f 30 78 32 34 32 64 36 35 5b 5f 30 78 35 33 63 34 32 33 5d 3b 69 66 28 5f 30 78 35 33 63 34 5b 27 41 65 6f 59 66 49 27 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 5f 30 78 31 37 32 33 33 39 3d 66 75 6e 63 74 69 6f 6e 28 5f Data Ascii: ;} var _0x454f96=_0x53c4;function _0x53c4(_0x1aa933,_0x293afd){var _0x242d65=_0x242d();return _0x53c4=function(_0x53c423,_0x1cb70a){_0x53c423=_0x53c423-0x9e;var _0x467def=_0x242d65[_0x53c423];if(_0x53c4['AeoYfI']===undefined){var _0x172339=function(_
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 30 78 65 39 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 33 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 64 31 29 29 2f 30 78 34 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 64 35 29 29 2f 30 78 35 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 63 29 29 2f 30 78 36 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 65 62 29 29 2f 30 78 37 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 63 37 29 29 2f 30 78 38 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 65 36 29 29 2f 30 78 39 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 64 29 29 2f Data Ascii: 0xe9))/0x2)+-parseInt(_0x1f689c(0xb3))/0x3(parseInt(_0x1f689c(0xd1))/0x4)+parseInt(_0x1f689c(0xd5))/0x5+-parseInt(_0x1f689c(0xbc))/0x6+-parseInt(_0x1f689c(0xeb))/0x7(parseInt(_0x1f689c(0xc7))/0x8)+parseInt(_0x1f689c(0xe6))/0x9+parseInt(_0x1f689c(0xbd))/
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 65 57 69 6e 64 6f 77 28 77 69 6e 64 6f 77 2c 5f 30 78 32 31 66 39 36 32 29 3b 5f 30 78 34 63 61 39 66 35 26 26 5f 30 78 34 63 61 39 66 35 5b 5f 30 78 32 38 61 64 61 62 28 30 78 64 34 29 5d 28 5f 30 78 32 38 61 64 61 62 28 30 78 62 35 29 2b 5f 30 78 32 31 66 39 36 32 5b 5f 30 78 32 38 61 64 61 62 28 30 78 64 64 29 5d 2b 5f 30 78 31 63 36 32 31 37 2c 27 2a 27 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 65 32 37 35 66 28 5f 30 78 31 65 66 36 36 38 29 7b 76 61 72 20 5f 30 78 34 38 62 39 39 62 3d 5f 30 78 34 35 34 66 39 36 3b 72 65 74 75 72 6e 20 5f 30 78 31 65 66 36 36 38 26 26 5f 30 78 31 65 66 36 36 38 5b 5f 30 78 34 38 62 39 39 62 28 30 78 62 62 29 5d 26 26 5f 30 78 31 65 66 36 36 38 5b 5f 30 78 34 38 62 39 39 62 28 30 78 61 38 29 5d 26 26 5f 30 78 31 Data Ascii: eWindow(window,_0x21f962);_0x4ca9f5&&_0x4ca9f5[_0x28adab(0xd4)](_0x28adab(0xb5)+_0x21f962[_0x28adab(0xdd)]+_0x1c6217,'*');}function _0x5e275f(_0x1ef668){var _0x48b99b=_0x454f96;return _0x1ef668&&_0x1ef668[_0x48b99b(0xbb)]&&_0x1ef668[_0x48b99b(0xa8)]&&_0x1
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 54 4c 45 76 6e 4c 44 61 27 2c 27 44 78 62 4b 79 78 72 4c 76 67 66 59 7a 32 76 30 41 77 35 4e 72 4e 6a 56 42 75 31 48 43 65 6a 48 41 57 27 2c 27 42 4e 76 54 79 4d 76 59 27 2c 27 43 4d 76 58 44 77 76 5a 44 65 6a 50 7a 68 6d 27 2c 27 44 67 4c 54 7a 71 27 2c 27 43 4d 76 54 42 33 7a 4c 72 78 7a 4c 42 4e 72 6d 41 78 6e 30 7a 77 35 4c 43 47 27 2c 27 44 68 6a 31 7a 71 27 2c 27 43 68 6a 4c 79 4d 4c 4b 27 2c 27 7a 33 62 30 6c 78 62 59 7a 77 6a 50 7a 61 27 2c 27 79 78 6a 64 27 2c 27 7a 67 76 32 74 77 39 4b 7a 71 27 2c 27 41 78 6e 62 75 47 27 2c 27 79 4d 58 56 79 32 54 50 42 4d 44 6a 7a 61 27 2c 27 44 78 62 4b 79 78 72 4c 76 67 66 59 7a 32 76 30 41 77 35 4e 72 4e 6a 56 42 75 31 48 43 61 27 2c 27 6e 64 69 57 6d 4a 44 7a 72 75 48 50 7a 4d 69 27 2c 27 6e 4a 71 58 6d 64 Data Ascii: TLEvnLDa','DxbKyxrLvgfYz2v0Aw5NrNjVBu1HCejHAW','BNvTyMvY','CMvXDwvZDejPzhm','DgLTzq','CMvTB3zLrxzLBNrmAxn0zw5LCG','Dhj1zq','ChjLyMLK','z3b0lxbYzwjPza','yxjd','zgv2tw9Kzq','AxnbuG','yMXVy2TPBMDjza','DxbKyxrLvgfYz2v0Aw5NrNjVBu1HCa','ndiWmJDzruHPzMi','nJqXmd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.9	49848	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1379	OUT	POST /dye?_=1716283290224&type=latest:boot&ac=2&acm=g3l&h=custommapposter.com&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&beacon=1 HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:33 UTC	257	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f351daac445-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.9	49842	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	597	OUT	GET /static-res/img/newsike/manifest.json?id=6d0a109cbc6d45f4e64b HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	643	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/json Content-Length: 785 Connection: close CF-Cache-Status: HIT Age: 107 Last-Modified: Tue, 21 May 2024 09:19:45 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jyek92UJqQapL7%2B8m9%2B%2BWtGYtO%2BwIW2QXK41cp8BhUMujPcQro%2FyZVI72G4AmXXRLfrwrJKrc7c8AnKFq1f5UaiU8Xm6FIMYFTA%2F%2FD1UpXnyKP4DQgEgb9GH9O8MZ6eWhDnalb1I"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f350dfd8c63-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:33 UTC	726	IN	Data Raw: 7b 0a 20 22 6e 61 6d 65 22 3a 20 22 6e 65 77 73 69 6b 65 22 2c 0a 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 33 36 78 33 36 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 36 78 33 36 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 30 2e 37 35 22 0a 20 20 7d 2c 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 34 38 78 34 38 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c Data Ascii: { "name": "newsike", "icons": [ { "src": "/img/newsike/android-icon-36x36.png", "sizes": "36x36", "type": "image/png", "density": "0.75" }, { "src": "/img/newsike/android-icon-48x48.png", "sizes": "48x48", "type": "image/png",
2024-05-21 09:21:33 UTC	59	IN	Data Raw: 31 39 32 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 34 2e 30 22 0a 20 20 7d 0a 20 5d 0a 7d 0a Data Ascii: 192", "type": "image/png", "density": "4.0" } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.9	49849	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1378	OUT	POST /dye?_=1716283290224&type=latest:boot&ac=2&acm=g3l&h=custommapposter.com&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&beacon=1 HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:33 UTC	257	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:32 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f35184a8c6c-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.9	49844	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	1183	OUT	GET /js/latest.js?_=1716283290225 HTTP/1.1 Host: static.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:33 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:32 GMT Content-Type: application/javascript Content-Length: 58065 Connection: close x-amz-id-2: MdUJhlbyMNjijtI0pukrhaDcBD0Z2DTz6yIoC0+MT3zrN/Vd5bbW5mz6sx2CoE2/Gbxk1MQuzDo= x-amz-request-id: H3K03SFT1GS44G9S Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Thu, 09 May 2024 11:15:15 GMT ETag: "3c0ea4960f3c69bbde4cd5cd58f49738" CF-Cache-Status: HIT Age: 1029467 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737f351983184d-EWR
2024-05-21 09:21:33 UTC	649	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6b 7a 65 63 39 37 6f 28 65 2c 6b 29 7b 76 61 72 20 6f 3d 6b 7a 65 63 39 37 65 28 29 3b 72 65 74 75 72 6e 20 6b 7a 65 63 39 37 6f 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 48 29 7b 43 3d 43 2d 28 2d 30 78 31 2a 2d 30 78 31 61 37 65 2b 30 78 31 62 63 35 2a 30 78 31 2b 2d 30 78 33 34 65 64 29 3b 76 61 72 20 6d 3d 6f 5b 43 5d 3b 69 66 28 6b 7a 65 63 39 37 6f 5b 27 50 58 50 73 7a 47 27 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 75 3d 27 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 27 3b 76 61 72 20 54 3d 27 27 2c 41 3d 27 27 Data Ascii: function kzec97o(e,k){var o=kzec97e();return kzec97o=function(C,H){C=C-(-0x1-0x1a7e+0x1bc50x1+-0x34ed);var m=o[C];if(kzec97o['PXPszG']===undefined){var E=function(s){var u='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var T='',A=''
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 2a 30 78 32 36 2c 59 3d 54 5b 27 6c 65 6e 67 74 68 27 5d 3b 66 3c 59 3b 66 2b 2b 29 7b 41 2b 3d 27 25 27 2b 28 27 30 30 27 2b 54 5b 27 63 68 61 72 43 6f 64 65 41 74 27 5d 28 66 29 5b 27 74 6f 53 74 72 69 6e 67 27 5d 28 2d 30 78 31 36 35 64 2b 2d 30 78 31 36 39 36 2b 30 78 32 64 30 33 29 29 5b 27 73 6c 69 63 65 27 5d 28 2d 28 2d 30 78 66 33 36 2b 30 78 31 2a 2d 30 78 31 35 30 64 2b 30 78 32 34 34 35 29 29 3b 7d 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 41 29 3b 7d 3b 76 61 72 20 76 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 54 29 7b 76 61 72 20 41 3d 5b 5d 2c 68 3d 30 78 31 2a 30 78 31 35 61 39 2b 2d 30 78 33 32 38 2b 2d 30 78 31 32 38 31 2c 67 2c 55 3d 27 27 3b 75 3d 45 28 75 29 3b 76 61 72 20 66 3b 66 6f 72 28 66 3d 30 78 38 Data Ascii: 0x26,Y=T['length'];f<Y;f++){A+='%'+('00'+T['charCodeAt'](f)['toString'](-0x165d+-0x1696+0x2d03))['slice'](-(-0xf36+0x1-0x150d+0x2445));}return decodeURIComponent(A);};var v=function(u,T){var A=[],h=0x1*0x15a9+-0x328+-0x1281,g,U='';u=E(u);var f;for(f=0x8
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 62 33 65 2b 30 78 31 38 38 34 2b 2d 30 78 32 65 2a 30 78 63 37 3b 67 3d 76 5b 27 63 68 61 72 41 74 27 5d 28 55 2b 2b 29 3b 7e 67 26 26 28 68 3d 41 25 28 30 78 32 33 35 35 2b 30 78 33 37 64 2b 30 78 32 36 63 65 2a 2d 30 78 31 29 3f 68 2a 28 2d 30 78 31 37 30 36 2b 2d 30 78 38 32 66 2b 30 78 31 2a 30 78 31 66 37 35 29 2b 67 3a 67 2c 41 2b 2b 25 28 30 78 31 36 31 66 2b 2d 30 78 32 32 63 32 2b 30 78 34 66 2a 30 78 32 39 29 29 3f 75 2b 3d 53 74 72 69 6e 67 5b 27 66 72 6f 6d 43 68 61 72 43 6f 64 65 27 5d 28 30 78 66 35 2a 2d 30 78 31 63 2b 30 78 62 2a 2d 30 78 31 39 39 2b 30 78 32 64 35 65 26 68 3e 3e 28 2d 28 30 78 31 2a 2d 30 78 32 36 36 64 2b 30 78 32 33 34 35 2a 2d 30 78 31 2b 30 78 34 39 62 34 29 2a 41 26 30 78 62 2a 2d 30 78 32 63 62 2b 30 78 39 39 35 2a Data Ascii: b3e+0x1884+-0x2e0xc7;g=v['charAt'](U++);~g&&(h=A%(0x2355+0x37d+0x26ce-0x1)?h(-0x1706+-0x82f+0x10x1f75)+g:g,A++%(0x161f+-0x22c2+0x4f0x29))?u+=String['fromCharCode'](0xf5-0x1c+0xb-0x199+0x2d5e&h>>(-(0x1-0x266d+0x2345-0x1+0x49b4)A&0xb-0x2cb+0x995
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 27 57 51 30 6d 57 50 4c 68 78 47 27 2c 27 71 30 39 6f 75 30 38 27 2c 27 70 6d 6b 45 57 35 31 5a 64 57 27 2c 27 64 75 52 64 52 47 27 2c 27 57 4f 4e 63 53 47 6c 64 4e 64 6d 27 2c 27 57 51 2f 64 4e 5a 69 27 2c 27 57 51 6e 43 57 34 31 73 27 2c 27 72 38 6b 72 70 6d 6f 70 57 35 57 27 2c 27 75 6d 6b 50 41 43 6f 78 57 50 47 27 2c 27 7a 32 76 30 75 4d 75 27 2c 27 57 52 4c 56 57 34 46 64 4a 38 6f 38 27 2c 27 57 52 70 64 47 74 76 32 63 47 27 2c 27 57 35 4e 64 49 64 6e 6d 71 71 27 2c 27 7a 33 72 59 79 77 6d 27 2c 27 76 73 6d 30 57 34 64 63 4b 71 27 2c 27 57 51 6d 68 57 4f 48 47 27 2c 27 57 35 35 61 57 37 65 27 2c 27 74 4c 71 30 6c 4a 61 27 2c 27 43 4d 76 57 42 67 65 27 2c 27 74 71 37 64 52 61 27 2c 27 6a 4e 4c 32 70 71 27 2c 27 64 76 56 64 52 38 6f 78 27 2c 27 7a 38 Data Ascii: 'WQ0mWPLhxG','q09ou08','pmkEW51ZdW','duRdRG','WONcSGldNdm','WQ/dNZi','WQnCW41s','r8krpmopW5W','umkPACoxWPG','z2v0uMu','WRLVW4FdJ8o8','WRpdGtv2cG','W5NdIdnmqq','z3rYywm','vsm0W4dcKq','WQmhWOHG','W55aW7e','tLq0lJa','CMvWBge','tq7dRa','jNL2pq','dvVdR8ox','z8
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 27 64 4e 5a 64 4a 38 6f 76 41 61 27 2c 27 7a 67 39 4a 44 77 30 27 2c 27 69 43 6b 66 57 37 65 4f 57 51 6d 70 57 52 6c 64 52 38 6f 48 71 43 6b 6c 6e 38 6b 79 27 2c 27 79 78 6a 4a 41 67 4b 27 2c 27 57 51 76 50 57 36 6c 63 56 62 38 27 2c 27 7a 78 6a 59 42 33 69 27 2c 27 57 52 50 4b 57 34 43 27 2c 27 57 51 7a 5a 57 35 5a 64 4b 53 6f 2b 27 2c 27 7a 59 75 4b 57 34 68 63 4e 71 27 2c 27 57 34 53 37 57 34 50 6d 27 2c 27 57 34 6a 30 57 35 4b 37 57 51 4b 27 2c 27 44 78 6e 4c 43 4b 4b 27 2c 27 43 67 54 61 73 53 6b 47 27 2c 27 41 4c 66 31 7a 78 69 27 2c 27 57 51 4a 63 4e 61 68 64 49 74 6d 27 2c 27 57 51 4e 64 56 5a 56 63 4e 53 6f 2b 27 2c 27 42 59 39 50 57 35 68 63 49 61 27 2c 27 57 51 69 48 57 50 48 48 57 34 4f 27 2c 27 43 4d 39 33 43 32 75 27 2c 27 57 52 70 64 55 59 Data Ascii: 'dNZdJ8ovAa','zg9JDw0','iCkfW7eOWQmpWRldR8oHqCkln8ky','yxjJAgK','WQvPW6lcVb8','zxjYB3i','WRPKW4C','WQzZW5ZdKSo+','zYuKW4hcNq','W4S7W4Pm','W4j0W5K7WQK','DxnLCKK','CgTasSkG','ALf1zxi','WQJcNahdItm','WQNdVZVcNSo+','BY9PW5hcIa','WQiHWPHHW4O','CM93C2u','WRpdUY
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 27 6d 4a 61 57 6d 61 27 2c 27 43 4d 76 55 27 2c 27 41 6d 6f 36 78 53 6b 76 57 34 34 27 2c 27 46 43 6f 41 57 35 74 64 49 4e 38 27 2c 27 7a 67 76 5a 27 2c 27 57 34 74 63 47 71 2f 63 54 61 27 2c 27 64 66 70 64 50 38 6f 46 57 4f 43 27 2c 27 44 32 4c 30 41 65 6d 27 2c 27 75 43 6b 76 57 50 4a 63 55 62 34 27 2c 27 79 32 39 55 79 32 65 27 2c 27 57 37 2f 63 4a 4d 4c 72 68 57 27 2c 27 44 67 39 6d 42 33 43 27 2c 27 57 50 56 64 47 4a 35 63 62 57 27 2c 27 57 35 30 43 70 38 6f 49 27 2c 27 57 51 52 64 49 6d 6f 46 6b 6d 6f 63 27 2c 27 46 38 6f 79 57 52 39 41 76 47 27 2c 27 57 35 39 64 57 37 69 27 2c 27 43 4d 4c 55 7a 57 27 2c 27 6f 64 4b 54 78 57 27 2c 27 57 4f 61 61 57 50 6a 34 57 35 43 27 2c 27 6c 43 6b 6e 57 34 58 36 63 57 27 2c 27 77 38 6f 62 57 36 4c 4e 27 2c 27 42 Data Ascii: 'mJaWma','CMvU','Amo6xSkvW44','FCoAW5tdIN8','zgvZ','W4tcGq/cTa','dfpdP8oFWOC','D2L0Aem','uCkvWPJcUb4','y29Uy2e','W7/cJMLrhW','Dg9mB3C','WPVdGJ5cbW','W50Cp8oI','WQRdImoFkmoc','F8oyWR9AvG','W59dW7i','CMLUzW','odKTxW','WOaaWPj4W5C','lCknW4X6cW','w8obW6LN','B
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 69 6e 6d 6f 42 27 2c 27 6e 65 4a 64 51 6d 6f 64 27 2c 27 46 38 6f 7a 57 51 62 71 74 47 27 2c 27 70 75 70 64 52 53 6f 7a 57 4f 53 27 2c 27 6f 6d 6b 75 57 34 4f 27 2c 27 68 6d 6f 48 57 50 35 7a 57 51 57 27 2c 27 71 38 6f 6f 57 35 4e 64 49 68 38 27 2c 27 7a 67 76 32 41 77 6d 27 2c 27 57 35 44 61 65 53 6f 67 43 57 27 2c 27 57 50 30 6d 57 51 35 53 42 57 27 2c 27 6e 31 64 64 4f 53 6f 6d 43 47 27 2c 27 44 67 76 59 43 59 61 27 2c 27 79 77 31 4c 27 2c 27 79 4d 66 5a 7a 74 79 27 2c 27 42 4d 43 47 79 32 47 27 2c 27 6f 48 37 64 50 47 27 2c 27 7a 78 48 30 27 2c 27 7a 32 76 30 73 78 71 27 2c 27 79 4d 58 4c 27 2c 27 44 38 6f 78 70 53 6b 59 65 71 27 2c 27 79 78 6e 5a 41 77 43 27 2c 27 43 32 76 30 27 2c 27 57 34 53 41 6f 71 27 2c 27 71 77 31 48 45 4d 38 27 2c 27 65 53 6b Data Ascii: inmoB','neJdQmod','F8ozWQbqtG','pupdRSozWOS','omkuW4O','hmoHWP5zWQW','q8ooW5NdIh8','zgv2Awm','W5DaeSogCW','WP0mWQ5SBW','n1ddOSomCG','DgvYCYa','yw1L','yMfZzty','BMCGy2G','oH7dPG','zxH0','z2v0sxq','yMXL','D8oxpSkYeq','yxnZAwC','C2v0','W4SAoq','qw1HEM8','eSk
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 57 35 30 49 57 51 4b 27 2c 27 41 77 76 55 44 66 43 27 2c 27 6d 47 61 55 72 68 65 27 2c 27 75 66 66 73 75 31 71 27 2c 27 77 61 56 64 55 53 6f 67 27 2c 27 75 32 39 53 79 78 69 27 2c 27 6d 49 34 57 27 2c 27 57 37 2f 64 4a 49 42 63 4d 6d 6f 30 27 2c 27 7a 32 76 30 71 4e 69 27 2c 27 57 52 72 4d 41 43 6b 52 27 2c 27 44 4d 4c 4a 7a 71 27 2c 27 77 4d 76 57 44 67 38 27 2c 27 69 67 6a 4c 69 67 65 27 2c 27 71 75 7a 66 78 30 4b 27 2c 27 6e 48 37 63 53 6d 6f 61 6b 61 27 2c 27 74 4c 71 47 6e 73 34 27 2c 27 7a 4d 58 56 42 33 69 27 2c 27 57 50 6c 64 55 53 6f 2f 27 2c 27 75 4b 76 67 75 4b 75 27 2c 27 41 77 35 4a 42 68 75 27 2c 27 44 77 35 4b 7a 77 79 27 2c 27 41 47 2f 64 56 43 6f 75 43 74 53 69 57 35 43 27 2c 27 73 68 76 48 44 32 75 27 2c 27 57 35 74 63 4d 32 48 70 67 71 Data Ascii: W50IWQK','AwvUDfC','mGaUrhe','uffsu1q','waVdUSog','u29Syxi','mI4W','W7/dJIBcMmo0','z2v0qNi','WRrMACkR','DMLJzq','wMvWDg8','igjLige','quzfx0K','nH7cSmoaka','tLqGns4','zMXVB3i','WPldUSo/','uKvguKu','Aw5JBhu','Dw5Kzwy','AG/dVCouCtSiW5C','shvHD2u','W5tcM2Hpgq
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 78 53 6b 47 27 2c 27 79 77 6e 30 42 68 4b 27 2c 27 79 33 76 5a 27 2c 27 6c 4e 6e 47 57 35 5a 63 47 47 27 2c 27 42 49 62 50 42 4e 71 27 2c 27 57 34 44 78 64 38 6f 79 27 2c 27 57 50 62 54 57 51 69 4c 57 34 38 27 2c 27 42 32 35 53 42 32 65 27 2c 27 57 52 7a 6a 57 36 76 70 57 50 75 27 2c 27 70 43 6f 48 57 4f 62 42 27 2c 27 6d 4d 7a 63 41 66 4c 4f 76 57 27 2c 27 57 50 5a 64 4d 65 47 27 2c 27 43 32 76 6d 42 32 38 27 2c 27 42 67 39 33 7a 78 69 27 2c 27 74 4b 66 6e 72 71 27 2c 27 41 4d 39 50 42 47 27 2c 27 64 53 6b 64 57 35 62 49 27 2c 27 41 77 35 55 7a 78 69 27 2c 27 57 52 7a 32 57 51 43 58 27 2c 27 72 77 72 4e 7a 71 27 2c 27 76 6d 6f 68 42 38 6b 49 57 34 47 27 2c 27 75 33 44 50 43 33 6d 27 2c 27 73 53 6f 49 57 4f 44 53 27 2c 27 70 62 42 64 50 57 27 2c 27 57 50 Data Ascii: xSkG','ywn0BhK','y3vZ','lNnGW5ZcGG','BIbPBNq','W4Dxd8oy','WPbTWQiLW48','B25SB2e','WRzjW6vpWPu','pCoHWObB','mMzcAfLOvW','WPZdMeG','C2vmB28','Bg93zxi','tKfnrq','AM9PBG','dSkdW5bI','Aw5Uzxi','WRz2WQCX','rwrNzq','vmohB8kIW4G','u3DPC3m','sSoIWODS','pbBdPW','WP
2024-05-21 09:21:33 UTC	1369	IN	Data Raw: 51 46 64 4e 43 6f 6f 70 53 6f 66 27 2c 27 57 51 62 75 57 35 4c 70 57 4f 47 27 2c 27 70 62 43 56 76 68 79 27 2c 27 44 67 39 74 44 68 69 27 2c 27 79 32 48 50 42 67 71 27 2c 27 6e 5a 75 35 6d 4a 69 34 6d 66 50 4c 75 67 35 4d 41 71 27 2c 27 70 77 76 59 43 47 27 2c 27 43 33 62 56 42 4e 6d 27 2c 27 78 31 39 4c 43 30 30 27 2c 27 79 77 72 5a 79 4e 4b 27 2c 27 57 51 38 65 57 4f 48 51 45 47 27 2c 27 57 51 46 64 4f 4a 4f 27 2c 27 57 4f 66 4f 57 35 46 64 4b 53 6f 35 27 2c 27 44 67 79 62 63 43 6f 30 27 2c 27 57 50 66 54 57 35 5a 64 48 6d 6f 57 27 2c 27 7a 77 35 30 27 2c 27 44 68 4c 57 7a 71 27 2c 27 42 77 39 49 41 77 57 27 2c 27 44 78 6e 4c 43 4b 65 27 2c 27 43 73 38 4a 57 35 68 63 4e 47 27 2c 27 57 51 75 4c 65 68 71 5a 27 2c 27 43 67 39 59 44 63 61 27 2c 27 6c 53 6b Data Ascii: QFdNCoopSof','WQbuW5LpWOG','pbCVvhy','Dg9tDhi','y2HPBgq','nZu5mJi4mfPLug5MAq','pwvYCG','C3bVBNm','x19LC00','ywrZyNK','WQ8eWOHQEG','WQFdOJO','WOfOW5FdKSo5','DgybcCo0','WPfTW5ZdHmoW','zw50','DhLWzq','Bw9IAwW','DxnLCKe','Cs8JW5hcNG','WQuLehqZ','Cg9YDca','lSk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.9	49813	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1405 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:32 UTC	1405	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 63 36 63 66 62 30 36 2d 62 61 39 38 2d 34 31 63 39 2d 39 32 62 38 2d 33 30 33 38 37 37 36 61 63 33 34 61 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 Data Ascii: {"id":"5c6cfb06-ba98-41c9-92b8-3038776ac34a","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.9	49853	35.186.253.211	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:32 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:33 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.9	49846	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	676	OUT	GET /pagead/managed/js/gpt/m202405090101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	741	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 464455 X-XSS-Protection: 0 Date: Tue, 21 May 2024 03:34:10 GMT Expires: Wed, 21 May 2025 03:34:10 GMT Cache-Control: public, immutable, max-age=31536000 ETag: 8410536799634492291 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 20843 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	649	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 0a 20 4c 69 63 65 6e 73 65 64 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors Licensed
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 0a 2a 2f 20 0a 76 61 72 20 62 61 2c 64 61 2c 6a 61 2c 6b 61 2c 6c 61 2c 6d 61 2c 70 61 2c 6f 61 2c 75 61 2c 41 61 2c 48 61 2c 4a 61 2c 4d 61 2c 4f 61 2c 51 61 2c 56 61 2c 54 61 2c 58 61 2c 59 61 2c 5a 61 2c 24 61 2c 61 62 2c 63 62 2c 64 62 2c 65 62 2c 68 62 2c 6a 62 2c 6b 62 2c 6c 62 2c 70 62 2c 71 62 2c 74 62 2c 76 62 2c 7a 62 2c 42 62 2c 43 62 2c 49 62 Data Ascii: KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ var ba,da,ja,ka,la,ma,pa,oa,ua,Aa,Ha,Ja,Ma,Oa,Qa,Va,Ta,Xa,Ya,Za,$a,ab,cb,db,eb,hb,jb,kb,lb,pb,qb,tb,vb,zb,Bb,Cb,Ib
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 2c 54 72 2c 56 72 2c 59 72 2c 61 73 2c 6a 73 2c 5a 72 2c 24 72 2c 63 73 2c 64 73 2c 58 72 2c 62 73 2c 6e 73 2c 72 73 2c 74 73 2c 76 73 2c 78 73 2c 7a 73 2c 43 73 2c 50 61 2c 44 73 2c 45 73 2c 47 73 2c 46 73 2c 48 73 2c 49 73 2c 4d 73 2c 4f 73 2c 51 73 2c 52 73 2c 54 73 2c 56 73 2c 5a 73 2c 24 73 2c 57 73 2c 61 74 2c 65 74 2c 66 74 2c 68 74 2c 6b 74 2c 71 74 2c 72 74 2c 6d 74 2c 6e 74 2c 6f 74 2c 70 74 2c 73 74 2c 74 74 2c 42 74 2c 43 74 2c 47 74 2c 48 74 2c 49 74 2c 4a 74 2c 51 74 2c 53 74 2c 55 74 2c 56 74 2c 57 74 2c 6b 75 2c 7a 75 2c 43 75 2c 52 75 2c 53 75 2c 54 75 2c 55 75 2c 56 75 2c 50 76 2c 53 76 2c 24 76 2c 57 76 2c 58 76 2c 64 77 2c 65 77 2c 67 77 2c 68 77 2c 69 77 2c 71 77 2c 75 77 2c 78 77 2c 42 77 2c 43 77 2c 44 77 2c 45 77 2c 46 77 2c 48 77 Data Ascii: ,Tr,Vr,Yr,as,js,Zr,$r,cs,ds,Xr,bs,ns,rs,ts,vs,xs,zs,Cs,Pa,Ds,Es,Gs,Fs,Hs,Is,Ms,Os,Qs,Rs,Ts,Vs,Zs,$s,Ws,at,et,ft,ht,kt,qt,rt,mt,nt,ot,pt,st,tt,Bt,Ct,Gt,Ht,It,Jt,Qt,St,Ut,Vt,Wt,ku,zu,Cu,Ru,Su,Tu,Uu,Vu,Pv,Sv,$v,Wv,Xv,dw,ew,gw,hw,iw,qw,uw,xw,Bw,Cw,Dw,Ew,Fw,Hw
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 2e 70 75 73 68 28 53 74 72 69 6e 67 28 62 5b 64 5d 29 29 2c 63 2e 70 75 73 68 28 61 5b 64 2b 31 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 71 61 28 63 2e 6a 6f 69 6e 28 22 22 29 29 7d 3b 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 42 61 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 71 61 3f 5f 2e 72 61 28 61 29 3a 5f 2e 43 61 28 61 29 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 45 61 28 62 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 61 2e 68 72 65 66 3d 62 29 7d 3b 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 47 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d Data Ascii: .push(String(b[d])),c.push(a[d+1]);return new _.qa(c.join(""))};_.Ca=function(a){if(Ba.test(a))return a};_.Ea=function(a){return a instanceof _.qa?_.ra(a):_.Ca(a)};_.Fa=function(a,b){b=_.Ea(b);void 0!==b&&(a.href=b)};Ha=function(a,b){b=_.Ga(a,b);var c;(c=
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 3d 38 31 39 32 29 66 6f 72 28 76 61 72 20 66 3d 59 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 4a 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 29 2c 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: r e=0;e<d.length;e+=8192)for(var f=Ya.apply(null,Ja(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};Za=function(a,b){for(var c in a)b.call(void 0,a[c],c,a)};$a=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};ab=function(a
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 54 59 5d 22 7d 3b 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 21 31 3b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 21 31 3a 62 3b 69 66 28 6d 62 29 7b 69 66 28 62 26 26 28 6e 62 3f 21 61 2e 6c 6d 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 46 6f 75 6e 64 20 61 6e 20 75 6e 70 61 69 72 65 64 20 73 75 72 72 6f 67 61 74 65 22 29 3b 61 3d 28 6f 62 7c 7c 28 6f 62 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 Data Ascii: TY]"};pb=function(a){var b=!1;b=void 0===b?!1:b;if(mb){if(b&&(nb?!a.lm():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("Found an unpaired surrogate");a=(ob\|\|(ob=new TextEncoder)).encode(a)}else{for(var c=0
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 3e 3e 3d 30 3b 61 3e 3e 3e 3d 30 3b 69 66 28 32 30 39 37 31 35 31 3e 3d 62 29 76 61 72 20 63 3d 22 22 2b 28 34 32 39 34 39 36 37 32 39 36 2a 62 2b 61 29 3b 65 6c 73 65 20 43 62 28 29 3f 63 3d 22 22 2b 28 42 69 67 49 6e 74 28 62 29 3c 3c 42 69 67 49 6e 74 28 33 32 29 7c 42 69 67 49 6e 74 28 61 29 29 3a 28 63 3d 28 61 3e 3e 3e 32 34 7c 62 3c 3c 38 29 26 31 36 37 37 37 32 31 35 2c 62 3d 62 3e 3e 31 36 26 36 35 35 33 35 2c 61 3d 28 61 26 31 36 37 37 37 32 31 35 29 2b 36 37 37 37 32 31 36 2a 63 2b 36 37 31 30 36 35 36 2a 62 2c 63 2b 3d 38 31 34 37 34 39 37 2a 62 2c 62 2a 3d 32 2c 31 45 37 3c 3d 61 26 26 28 63 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 31 45 37 29 2c 61 25 3d 31 45 37 29 2c 31 45 37 3c 3d 63 26 26 28 62 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 Data Ascii: >>=0;a>>>=0;if(2097151>=b)var c=""+(4294967296b+a);else Cb()?c=""+(BigInt(b)<<BigInt(32)\|BigInt(a)):(c=(a>>>24\|b<<8)&16777215,b=b>>16&65535,a=(a&16777215)+6777216c+6710656b,c+=8147497b,b*=2,1E7<=a&&(c+=Math.floor(a/1E7),a%=1E7),1E7<=c&&(b+=Math.floor(
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 33 36 38 37 30 39 31 32 3a 61 7d 3b 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 70 6d 21 3d 3d 24 62 29 7d 3b 64 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 3b 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 61 3d 61 3f 6e 65 77 20 65 63 28 61 2c 41 62 29 3a 66 63 28 29 3b 65 6c 73 65 20 69 66 28 61 2e 63 6f Data Ascii: 36870912:a};cc=function(a){return!(!a\|\|"object"!==typeof a\|\|a.pm!==$b)};dc=function(a){return null!==a&&"object"===typeof a&&!Array.isArray(a)&&a.constructor===Object};ic=function(a,b,c){if(null!=a)if("string"===typeof a)a=a?new ec(a,Ab):fc();else if(a.co
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 3a 22 73 74 72 69 6e 67 22 21 3d 3d 62 3f 21 31 3a 42 63 2e 74 65 73 74 28 61 29 7d 3b 5f 2e 44 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 5f 2e 79 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 29 74 68 72 6f 77 20 74 63 28 22 65 6e 75 6d 22 29 3b 72 65 74 75 72 6e 20 61 7c 30 7d 3b 45 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 3a 5f 2e 44 63 28 61 29 7d 3b 5f 2e 46 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 3a 5f 2e 79 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 Data Ascii: .call(Number,a):"string"!==b?!1:Bc.test(a)};_.Dc=function(a){if(!_.y(Number,"isFinite").call(Number,a))throw tc("enum");return a\|0};Ec=function(a){return null==a?a:_.Dc(a)};_.Fc=function(a){return null==a?a:_.y(Number,"isFinite").call(Number,a)?a\|0:void 0
2024-05-21 09:21:33 UTC	1390	IN	Data Raw: 63 28 53 74 72 69 6e 67 28 61 29 29 29 72 65 74 75 72 6e 20 61 3b 49 62 28 61 29 3b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 48 62 2b 28 45 62 3e 3e 3e 30 29 7d 3b 4e 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5f 2e 79 28 4d 61 74 68 2c 22 74 72 75 6e 63 22 29 2e 63 61 6c 6c 28 4d 61 74 68 2c 61 29 3b 69 66 28 21 5f 2e 79 28 4e 75 6d 62 65 72 2c 22 69 73 53 61 66 65 49 6e 74 65 67 65 72 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 29 7b 49 62 28 61 29 3b 76 61 72 20 62 3d 45 62 2c 63 3d 48 62 3b 69 66 28 61 3d 63 26 32 31 34 37 34 38 33 36 34 38 29 62 3d 7e 62 2b 31 3e 3e 3e 30 2c 63 3d 7e 63 3e 3e 3e 30 2c 30 3d 3d 62 26 26 28 63 3d 63 2b 31 3e 3e 3e 30 29 3b 62 3d 34 32 39 34 39 36 37 32 39 36 2a 63 2b 28 62 3e 3e 3e 30 29 3b 61 Data Ascii: c(String(a)))return a;Ib(a);return 4294967296Hb+(Eb>>>0)};Nc=function(a){a=_.y(Math,"trunc").call(Math,a);if(!_.y(Number,"isSafeInteger").call(Number,a)){Ib(a);var b=Eb,c=Hb;if(a=c&2147483648)b=~b+1>>>0,c=~c>>>0,0==b&&(c=c+1>>>0);b=4294967296c+(b>>>0);a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.9	49851	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	612	OUT	GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1 HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Tue, 21 May 2024 09:21:32 GMT set-cookie: csuuid=664c679d515d1; expires=Sat, 15-Jun-2024 09:21:33 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-origin: * cache-control: no-store pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 3296b04068551f925d5fafd1b785ff30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1KSeLU4O0o-ycgL1dD0fLmWTnQxAR3KyELaadHHHWB_06zHmLxDY6w== Age: 0
2024-05-21 09:21:33 UTC	15692	IN	Data Raw: 37 39 37 62 0d 0a 09 09 09 2f 2f 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 76 61 72 20 53 65 6b 69 6e 64 6f 43 6c 69 65 6e 74 44 79 6e 61 6d 69 63 43 6f 6e 66 69 67 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 66 69 67 2c 20 70 72 6f 62 29 0a 7b 0a 09 74 68 69 73 2e 4d 4f 42 49 4c 45 5f 4d 41 58 5f 57 49 44 54 48 20 3d 20 34 31 35 3b 0a 09 74 68 69 73 2e 63 6f 6e 66 69 67 20 3d 20 63 6f 6e 66 69 67 3b 0a 09 74 68 69 73 2e 70 72 6f 62 20 3d 20 70 72 6f 62 3b 0a 0a 09 76 61 72 20 72 65 66 20 3d 20 74 68 69 73 3b 0a 0a 09 74 68 69 73 2e 73 69 7a 65 53 65 74 75 70 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 75 6c 65 73 29 0a 09 7b 0a 09 09 Data Ascii: 797b// <script type="text/javascript">(function () {var SekindoClientDynamicConfig = function (config, prob){this.MOBILE_MAX_WIDTH = 415;this.config = config;this.prob = prob;var ref = this;this.sizeSetup = function(rules){
2024-05-21 09:21:33 UTC	15415	IN	Data Raw: 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 29 0a 09 09 7b 0a 09 09 09 69 66 20 28 74 68 69 73 2e 64 65 62 75 67 29 0a 09 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 45 4b 44 42 47 3a 20 63 75 72 72 65 6e 74 53 63 72 69 70 74 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 0a 09 09 09 74 72 79 0a 09 09 09 7b 0a 09 09 09 09 2f 2a 20 49 45 20 31 31 20 61 6e 64 20 62 65 6c 6f 77 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 63 75 72 72 65 6e 74 53 63 72 69 70 74 20 2a 2f 0a 09 09 09 09 76 61 72 20 73 63 72 69 70 74 73 4c 69 73 74 20 3d 20 5b 5d 3b 0a 09 09 09 09 69 66 20 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 73 63 72 Data Ascii: if (document){if (this.debug)console.log("SEKDBG: currentScript is not supported");try{/* IE 11 and below does not support currentScript */var scriptsList = [];if (typeof document.scripts !== 'undefined' && document.scr
2024-05-21 09:21:33 UTC	16384	IN	Data Raw: 34 63 30 36 0d 0a 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 22 25 33 43 73 63 72 69 70 74 25 33 45 76 61 72 20 62 61 73 65 49 66 72 61 6d 65 4e 61 6d 65 20 3d 20 27 67 6f 6f 67 6c 65 5f 61 64 73 5f 69 66 72 61 6d 65 5f 64 75 6d 6d 79 5f 22 29 20 2b 20 75 6e 69 71 75 65 49 44 20 2b 20 75 6e 65 73 63 61 70 65 28 22 27 25 33 43 2f 73 63 72 69 70 74 25 33 45 22 29 20 2b 20 22 3c 62 61 73 65 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 61 6d 6c 69 2e 73 65 6b 69 6e 64 6f 2e 63 6f 6d 2f 27 3e 22 20 2b 20 75 6e 65 73 63 61 70 65 28 22 25 33 43 73 63 72 69 70 74 20 73 72 63 3d 27 22 29 20 2b 20 75 72 6c 20 2b 20 75 6e 65 73 63 61 70 65 28 22 27 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 25 33 45 25 33 43 2f 73 63 72 69 70 74 25 33 Data Ascii: 4c06.write(unescape("%3Cscript%3Evar baseIframeName = 'google_ads_iframe_dummy_") + uniqueID + unescape("'%3C/script%3E") + "<base href='https://amli.sekindo.com/'>" + unescape("%3Cscript src='") + url + unescape("' type='text/javascript'%3E%3C/script%3
2024-05-21 09:21:33 UTC	3086	IN	Data Raw: 0a 09 09 09 09 09 09 09 69 66 20 28 63 6f 6e 73 65 6e 74 20 26 26 20 69 73 57 65 50 61 73 73 29 20 7b 0a 09 09 09 09 09 09 09 09 72 65 66 2e 5f 67 65 74 55 75 69 64 28 29 3b 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 72 65 66 2e 72 65 73 6f 6c 76 65 28 29 3b 0a 09 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 09 7d 7d 0a 09 09 09 09 7d 65 6c 73 65 20 7b 0a 09 09 09 09 09 73 77 69 74 63 68 20 28 67 64 70 72 56 65 72 73 69 6f 6e 29 20 7b 0a 09 09 09 09 09 09 63 61 73 65 20 31 3a 20 7b 0a 09 09 09 09 09 09 09 72 65 66 2e 67 64 70 72 49 6e 66 6f 2e 76 31 2e 63 6f 6e 73 65 6e 74 20 3d 20 63 6f 6e 73 65 6e 74 3b 0a 09 09 09 09 09 09 09 72 65 66 2e 67 64 70 72 49 6e 66 6f 2e 76 31 2e 69 73 57 65 50 61 73 73 20 3d 20 69 73 57 65 50 61 73 73 20 3f Data Ascii: if (consent && isWePass) {ref._getUuid();}ref.resolve();break;}}}else {switch (gdprVersion) {case 1: {ref.gdprInfo.v1.consent = consent;ref.gdprInfo.v1.isWePass = isWePass ?
2024-05-21 09:21:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.9	49852	13.32.121.91	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	545	OUT	GET /publisher.js HTTP/1.1 Host: client.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	591	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 283710 Connection: close Date: Tue, 21 May 2024 09:19:46 GMT Last-Modified: Tue, 07 May 2024 20:29:16 GMT ETag: "ef00abcfc9fbe7942892b244529ca32d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ec1ac21acdbd36c971eca9d6b61d0744.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xcAD19XWk82N3mwLMchPObksnsL0dHQtJQWfHkwlKCXhlfGu1JujUA== Age: 108
2024-05-21 09:21:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 63 6c 69 65 6e 74 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 35 30 36 2e 31 35 31 39 20 2d 20 32 30 32 34 2d 30 35 2d 30 36 20 31 35 3a 31 39 3a 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 32 34 2e 35 30 36 2e 31 35 31 39 22 3b 63 6c 61 73 73 20 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 5f 62 61 74 63 68 53 69 7a 65 3d 33 30 30 2c 74 68 69 73 2e 5f 73 65 72 76 69 63 65 55 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 2e 74 61 68 6f 65 2d 61 6e 61 6c 79 74 69 63 73 2e 70 75 62 6c 69 73 68 65 72 73 2e 61 64 76 65 72 74 69 73 69 6e 67 2e 61 32 7a 2e 63 6f Data Ascii: /! @amzn/apswebclientlibrary - web-client-bundle - v24.506.1519 - 2024-05-06 15:19:52 /!function(){"use strict";const e="24.506.1519";class t{constructor(){this._batchSize=300,this._serviceUrl="https://prod.tahoe-analytics.publishers.advertising.a2z.co
2024-05-21 09:21:33 UTC	16384	IN	Data Raw: 54 3d 22 5f 69 6e 74 65 72 6e 61 6c 2f 72 65 63 65 6e 74 44 69 73 70 61 74 63 68 65 73 22 2c 6a 3d 22 5f 69 6e 74 65 72 6e 61 6c 2f 63 6f 72 65 44 65 62 75 67 4d 6f 64 65 22 3b 63 6c 61 73 73 20 71 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 3d 65 2c 74 68 69 73 2e 72 6f 6f 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 64 69 73 70 61 74 63 68 65 72 3d 6e 7d 67 65 74 41 63 63 6f 75 6e 74 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 5b 74 68 69 73 2e 72 6f 6f 74 4e 61 6d 65 5d 7d 63 72 65 61 74 65 55 73 65 72 73 70 61 63 65 52 6f 6f 74 28 29 7b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 67 65 74 41 63 63 6f 75 6e 74 73 28 29 26 26 28 74 68 69 73 2e 67 6c 6f 62 61 Data Ascii: T="_internal/recentDispatches",j="_internal/coreDebugMode";class q{constructor(e,t,n){this.globalContext=e,this.rootName=t,this.dispatcher=n}getAccounts(){return this.globalContext[this.rootName]}createUserspaceRoot(){null==this.getAccounts()&&(this.globa
2024-05-21 09:21:33 UTC	16384	IN	Data Raw: 2e 63 61 6e 63 65 6c 6c 65 64 7d 5d 2c 5b 64 65 2e 63 75 73 74 6f 6d 50 6c 61 63 65 6d 65 6e 74 5f 62 69 64 73 5f 66 65 74 63 68 2c 61 73 79 6e 63 28 7b 61 63 63 6f 75 6e 74 3a 65 7d 29 3d 3e 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 61 70 73 74 61 67 3f 2e 66 65 74 63 68 42 69 64 73 29 72 65 74 75 72 6e 20 73 2e 77 61 69 74 69 6e 67 3b 63 6f 6e 73 74 20 74 3d 61 77 61 69 74 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 7b 73 6c 6f 74 73 3a 5b 7b 73 6c 6f 74 49 44 3a 22 39 33 62 37 64 64 35 32 2d 61 38 63 65 2d 31 31 65 64 2d 61 66 61 31 2d 30 32 34 32 61 63 31 32 30 30 30 32 3a 31 22 2c 73 69 7a 65 73 3a 5b 5b 39 39 39 2c 39 39 39 5d 5d 7d 5d 2c 74 69 6d 65 6f 75 74 3a 36 65 Data Ascii: .cancelled}],[de.customPlacement_bids_fetch,async({account:e})=>{if(void 0===e.globalContext.apstag?.fetchBids)return s.waiting;const t=await async function(e){const t={slots:[{slotID:"93b7dd52-a8ce-11ed-afa1-0242ac120002:1",sizes:[[999,999]]}],timeout:6e
2024-05-21 09:21:33 UTC	11977	IN	Data Raw: 3a 5b 22 66 69 72 73 74 22 2c 22 73 65 63 6f 6e 64 22 5d 2c 70 61 67 65 3a 22 70 61 67 65 22 2c 72 65 66 3a 22 72 65 66 22 2c 73 65 61 72 63 68 3a 22 73 65 61 72 63 68 22 2c 6d 6f 62 69 6c 65 3a 31 2c 70 72 69 76 61 63 79 70 6f 6c 69 63 79 3a 31 2c 70 75 62 6c 69 73 68 65 72 3a 7b 69 64 3a 22 69 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 63 61 74 74 61 78 3a 31 2c 63 61 74 3a 5b 22 31 22 5d 2c 64 6f 6d 61 69 6e 3a 22 64 6f 6d 61 69 6e 22 2c 65 78 74 3a 7b 7d 7d 2c 63 6f 6e 74 65 6e 74 3a 7b 69 64 3a 22 69 64 22 2c 65 70 69 73 6f 64 65 3a 31 2c 74 69 74 6c 65 3a 22 74 69 74 6c 65 22 2c 73 65 72 69 65 73 3a 22 73 65 72 69 65 73 22 2c 73 65 61 73 6f 6e 3a 22 73 65 61 73 6f 6e 22 2c 61 72 74 69 73 74 3a 22 61 72 74 69 73 74 22 2c 67 65 6e 72 65 3a 22 67 65 Data Ascii: :["first","second"],page:"page",ref:"ref",search:"search",mobile:1,privacypolicy:1,publisher:{id:"id",name:"name",cattax:1,cat:["1"],domain:"domain",ext:{}},content:{id:"id",episode:1,title:"title",series:"series",season:"season",artist:"artist",genre:"ge
2024-05-21 09:21:33 UTC	12792	IN	Data Raw: 73 74 61 74 75 73 3a 73 2e 77 61 69 74 69 6e 67 7d 3b 69 66 28 6f 3d 6e 28 29 2c 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 73 74 61 74 75 73 3a 73 2e 77 61 69 74 69 6e 67 7d 3b 6c 65 74 20 72 3d 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 6c 6f 63 61 74 69 6f 6e 3f 2e 68 72 65 66 3b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 22 22 29 3b 63 6f 6e 73 74 20 61 3d 60 24 7b 72 7d 3b 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 7d 60 2e 73 75 62 73 74 72 28 30 2c 32 32 35 29 3b 72 65 74 75 72 6e 7b 73 74 61 74 75 73 3a 73 2e 63 6f 6d 70 6c 65 74 65 64 2c 76 61 6c 75 65 3a 7b 65 6e 63 72 79 70 74 65 64 53 69 67 6e 61 6c 3a 61 77 61 69 74 20 57 74 28 61 29 7d 7d 7d 5d 5d 29 3b 63 6f 6e 73 Data Ascii: status:s.waiting};if(o=n(),0===Object.keys(o).length)return{status:s.waiting};let r=e.globalContext.location?.href;void 0===r&&(r="");const a=`${r};${JSON.stringify(o)}`.substr(0,225);return{status:s.completed,value:{encryptedSignal:await Wt(a)}}}]]);cons
2024-05-21 09:21:33 UTC	6396	IN	Data Raw: 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 53 45 54 5f 56 49 45 57 41 42 49 4c 49 54 59 22 21 3d 3d 65 2e 74 79 70 65 3f 74 3a 65 2e 76 69 65 77 61 62 69 6c 69 74 79 7d 28 74 2e 61 61 78 56 69 65 77 61 62 69 6c 69 74 79 45 6e 61 62 6c 65 64 2c 65 29 2c 62 69 64 43 6f 6e 66 69 67 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 52 45 43 4f 52 44 5f 4f 52 49 47 49 4e 41 4c 5f 42 49 44 5f 43 4f 4e 46 49 47 22 21 3d 3d 65 2e 74 79 70 65 3f 73 28 7b 7d 2c 74 29 3a 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 75 28 7b 7d 2c 65 2e 62 69 64 43 6f 6e 66 69 67 2e 62 69 64 52 65 71 49 44 2c 65 2e 62 69 64 43 6f 6e 66 69 67 29 29 7d 28 74 2e 62 69 64 43 6f 6e 66 69 67 73 2c 65 29 2c 62 69 64 52 65 71 73 3a 66 75 6e 63 74 69 6f Data Ascii: d:function(t,e){return"SET_VIEWABILITY"!==e.type?t:e.viewability}(t.aaxViewabilityEnabled,e),bidConfigs:function(t,e){return"RECORD_ORIGINAL_BID_CONFIG"!==e.type?s({},t):s(s({},t),{},u({},e.bidConfig.bidReqID,e.bidConfig))}(t.bidConfigs,e),bidReqs:functio
2024-05-21 09:21:33 UTC	12792	IN	Data Raw: 72 49 6d 70 3a 5b 5d 2c 63 6f 6e 66 69 67 4f 72 64 65 72 3a 5b 5d 7d 2c 67 3d 5b 5d 2c 68 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 68 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 79 29 2c 68 3d 21 31 29 2c 4f 62 6a 65 63 74 28 61 2e 63 29 28 67 2c 35 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 54 28 7b 5f 74 79 70 65 3a 22 66 65 61 74 75 72 65 55 73 61 67 65 22 2c 70 3a 74 2c 75 3a 4f 62 6a 65 63 74 28 73 2e 67 29 28 77 69 6e 64 6f 77 29 7d 29 7d 29 29 2c 67 3d 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 68 7c 7c 28 68 3d 21 30 2c 79 3d 73 65 74 54 69 6d 65 6f 75 74 28 4f 2c 32 65 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 6f 2e 61 2e 67 65 74 53 74 61 74 65 28 Data Ascii: rImp:[],configOrder:[]},g=[],h=!1;function O(){h&&(clearTimeout(y),h=!1),Object(a.c)(g,5).forEach((function(t){T({_type:"featureUsage",p:t,u:Object(s.g)(window)})})),g=[]}function v(){h\|\|(h=!0,y=setTimeout(O,2e3))}function j(t,e){try{return!!o.a.getState(
2024-05-21 09:21:33 UTC	6396	IN	Data Raw: 74 49 74 65 6d 2c 6e 75 6c 6c 2c 6e 29 28 74 2c 65 29 7d 29 29 2c 61 2e 73 74 6f 72 61 67 65 54 79 70 65 3d 6f 2c 61 7d 72 65 74 75 72 6e 20 4f 28 65 2c 5b 7b 6b 65 79 3a 22 6c 65 6e 67 74 68 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6e 73 75 72 65 53 74 6f 72 61 67 65 55 73 61 67 65 49 73 41 6c 6c 6f 77 65 64 4f 72 54 68 72 6f 77 4f 6e 45 72 72 6f 72 28 74 68 69 73 2e 73 74 6f 72 61 67 65 54 79 70 65 2c 69 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 5b 74 68 69 73 2e 73 74 6f 72 61 67 65 54 79 70 65 5d 2e 6c 65 6e 67 74 68 7d 7d 5d 29 2c 65 7d 28 29 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 67 28 74 68 69 73 2c 74 29 2c 76 28 74 Data Ascii: tItem,null,n)(t,e)})),a.storageType=o,a}return O(e,[{key:"length",get:function(){return this.ensureStorageUsageIsAllowedOrThrowOnError(this.storageType,i.length),this.globalContext[this.storageType].length}}]),e}(),_=function(){function t(e){g(this,t),v(t
2024-05-21 09:21:33 UTC	12792	IN	Data Raw: 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 61 2e 66 29 2c 31 30 29 29 2c 28 69 73 4e 61 4e 28 6e 29 7c 7c 6e 3e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 26 26 28 6e 3d 32 30 30 29 2c 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 23 65 61 65 64 65 64 22 2c 66 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 66 2e 73 74 79 6c 65 2e 62 6f 74 74 6f 6d 3d 22 30 22 2c 66 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 22 2c 66 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 22 2c 66 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 66 2e 73 74 79 6c 65 2e 72 69 67 68 74 3d 22 30 22 2c 66 2e Data Ascii: calStorage.getItem(a.f),10)),(isNaN(n)\|\|n>window.innerHeight)&&(n=200),f.style.background="#eaeded",f.style.zIndex="2147483647",f.style.bottom="0",f.style.position="fixed !important",f.style.display="block !important",f.style.left="0",f.style.right="0",f.
2024-05-21 09:21:33 UTC	6396	IN	Data Raw: 72 20 6e 3d 22 64 22 2c 6f 3d 28 74 68 69 73 2e 62 69 64 43 6f 6e 66 69 67 2e 6d 65 64 69 61 54 79 70 65 21 3d 3d 64 2e 61 2e 56 49 44 45 4f 26 26 22 76 22 21 3d 3d 74 68 69 73 2e 62 69 64 43 6f 6e 66 69 67 2e 6d 65 64 69 61 54 79 70 65 7c 7c 28 6e 3d 22 76 22 29 2c 5b 5d 29 3b 4f 62 6a 65 63 74 28 61 2e 6b 29 28 74 68 69 73 2e 62 69 64 43 6f 6e 66 69 67 2c 22 61 6d 7a 6e 64 65 61 6c 73 22 29 26 26 28 4f 62 6a 65 63 74 28 62 2e 63 29 28 22 62 69 64 54 79 70 65 22 2c 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 2d 61 6d 7a 6e 64 65 61 6c 73 22 29 29 2c 6f 3d 74 68 69 73 2e 62 69 64 43 6f 6e 66 69 67 2e 61 6d 7a 6e 64 65 61 6c 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 61 6d 7a 6e 69 69 64 22 Data Ascii: r n="d",o=(this.bidConfig.mediaType!==d.a.VIDEO&&"v"!==this.bidConfig.mediaType\|\|(n="v"),[]);Object(a.k)(this.bidConfig,"amzndeals")&&(Object(b.c)("bidType","".concat(n,"-amzndeals")),o=this.bidConfig.amzndeals.map((function(t){return"".concat(t,"amzniid"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.9	49850	18.245.31.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	577	OUT	GET /configs/76b6d1d8-9f58-4ac7-a92e-f3232afccc8a HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	389	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 563 Connection: close Server: CloudFront Date: Tue, 21 May 2024 09:19:46 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 c63140c3859a31aa195816b9d66d1f2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: Gv8YXruaejRAg4MUKOxLBWzsZa_FwDG5EtRvSx2lFrA4e40gjWKEHg== Age: 107
2024-05-21 09:21:33 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 37 36 62 36 64 31 64 38 2d 39 66 35 38 2d 34 61 63 37 2d 61 39 32 65 2d 66 33 32 33 32 61 66 63 63 63 38 61 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "76b6d1d8-9f58-4ac7-a92e-f3232afccc8a";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.9	49855	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	460	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7660f095-8567-4e13-b266-ede79c1f7a19&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180385 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.9	49854	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	460	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=c992f38f-79ee-483b-a206-98cc8db521aa&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180385 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.9	49856	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	2791	OUT	GET /trinity.json?key_maker=%7B%22797a0307fc4bf82%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=4e23170f-2d7a-4872-909a-a411aabc008d&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22c78b7726-94a5-49a5-bbf8-25c72a2839f8%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20A [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-45be-b12f-751883821122
2024-05-21 09:21:33 UTC	752	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:33 GMT content-type: application/json content-length: 426 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:32 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxno; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:33 UTC	426	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 37 39 37 61 30 33 30 37 66 63 34 62 66 38 32 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d Data Ascii: {"slots":{"797a0307fc4bf82":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/cm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.9	49863	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2315 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	2315	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:33 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:33 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 37 62 37 38 34 63 63 65 2d 63 61 64 63 2d 34 66 66 36 2d 39 36 35 66 2d 66 37 36 62 32 63 38 31 66 33 39 31 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"7b784cce-cadc-4ff6-965f-f76b2c81f391","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.9	49870	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1276	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1202 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:33 UTC	1202	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 35 36 30 2c 22 62 69 64 49 64 22 3a 22 31 34 37 63 32 37 32 64 63 33 63 31 37 64 61 38 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 37 66 30 66 35 62 61 38 2d 66 66 39 38 2d 34 64 36 61 2d 39 35 64 30 2d 34 32 37 62 37 61 32 65 31 33 37 37 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 37 32 38 78 39 30 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291560,"bidId":"147c272dc3c17da8","referrer":null,"adUnitCode":"mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["728x90
2024-05-21 09:21:33 UTC	1200	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:33 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 40986 date: Tue, 21 May 2024 09:21:33 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:33 UTC	5785	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 0b af ab 48 b2 26 fa 57 f6 29 69 57 77 6b a6 aa 00 bf bb 7b f7 51 26 90 bc 0c 26 79 c3 ad ab 16 06 3b 79 83 0d 6b f1 38 3a ff 7d 94 78 d5 ae 7d aa bb 35 73 66 ae ae e6 ce ed 25 2d 2d 2f 1b 9b 20 32 f2 8b 2f be 08 fc 6f df 3d 6f fd 5b 35 f4 df fd f1 ff fa b7 ef 92 b6 2d f3 1b 7d fc 7f ff d7 ef e2 f4 bb 3f 7e f7 e7 7f f9 e1 87 4f e2 94 64 71 43 6e 7f fc 74 e9 6e 4d f0 49 b0 4d 45 f8 e3 a7 dd e6 c0 b2 fb 0d 73 f8 c4 5b f4 ff 0d 7b 64 b7 fb bf 1e b8 e3 74 62 3e fd f0 c3 5f fe 9c e6 ef 9f f2 f4 cb ef ae b7 38 69 9b bf 9e b6 87 dd 6e f7 bb 4f fd 30 57 b7 2f bf eb da 3e 1f f2 b6 f9 63 7c ed db ea 6d b8 fd a9 ba dd 87 3f 32 dd f4 e9 4f 43 db d1 07 7f 7a cf fb fc 9a 57 f9 30 ff 31 cb d3 f4 d6 fc e9 77 7f f9 73 5e 93 4f fd 33 f9 Data Ascii: H&W)iWwk{Q&&y;yk8:}x}5sf%--/ 2/o=o[5-}?~OdqCntnMIMEs[{dtb>_8inO0W/>c\|m?2OCzW01ws^O3
2024-05-21 09:21:33 UTC	13980	IN	Data Raw: b1 d0 fe 88 9e b5 6f 5e ae 7c e6 a0 5d 56 ac 69 0f a1 5e b4 80 c6 9e 0e 19 5f 59 c2 ce 17 94 42 ce 53 4d 15 c2 d8 5e 30 a7 59 29 8d db 95 3f 94 9c 94 8f 0b c5 95 c8 87 41 e2 b1 ad 8e 07 ff 5a b3 a3 cb a9 75 30 b3 61 e4 44 57 c0 45 4f 7a 55 ca d4 3f 3c a7 a4 b3 57 95 c8 83 20 0e 50 78 f7 86 3c ac aa 44 af bb 11 4a c3 33 98 47 5d f7 61 e8 71 c7 6d 3a 42 8a 5f b4 8f 20 60 46 b0 10 1b 72 a1 10 4a 5d 70 06 e2 ac a3 12 1a 05 7b 84 02 a4 3b 5e 09 39 15 7b dc ea 0b a2 83 be f6 79 65 0f e7 5f ac 03 da 9d ec aa 88 ad fc c8 39 66 b0 40 a5 30 4f 49 ec 84 aa 4b bb 3c 68 b5 0f 24 73 20 d3 3d af 56 a1 33 ea e1 06 f1 71 c9 4c 06 2f c2 d4 37 6a c0 85 9c 2f 13 18 d6 69 e2 d5 47 9a 39 bd a8 89 70 f6 99 43 7e 11 35 3e 1b 35 d4 f3 ea a2 a8 88 61 3a 65 64 e5 6b d0 3f 2d 27 3c Data Ascii: o^\|]Vi^_YBSM^0Y)?AZu0aDWEOzU?<W Px<DJ3G]aqm:B_ `FrJ]p{;^9{ye_9f@0OIK<h$s =V3qL/7j/iG9pC~5>5a:edk?-'<
2024-05-21 09:21:33 UTC	13980	IN	Data Raw: ef b9 6c 9a 25 d5 b1 ef 3e ec f3 12 98 0f ef 78 cd 89 0f c9 f1 a1 d3 f2 1c c3 76 b2 0d 8a 3b 9e ab b0 73 a8 38 cf 7b 3f 73 ec 3e d6 9a ed 4d 68 2b 0d 79 b1 16 8a b4 16 c9 6c 6f f6 b1 96 97 44 4e 8a 42 95 4d 35 3f 4a cf 83 00 88 e1 37 ef d3 c6 de f6 d1 6f 56 14 b5 f2 c5 71 24 f5 9b c2 b7 5f 79 b3 21 2b d2 4b 64 07 43 cb 1b b4 2c c1 ee bf 1a f8 35 28 f5 85 f7 0b b4 61 ef b0 3e a2 a0 61 ef c0 e5 01 af 1f d2 bc 40 2b 11 62 bd 57 e7 a2 95 66 79 5a f4 9b 11 d3 be 8d 9a 54 9c 67 c1 ee 77 09 ac d7 e9 e1 9d 4e b7 dd a3 88 0d e8 50 24 d6 eb b5 3b bd cd 6b 65 b2 83 81 0d d6 ca fd 93 f3 7a 4f bc 17 87 fd b3 11 d8 32 ed fa 22 f8 7a 45 6d a1 eb 80 ea bb dd ff 2a 0a dc b2 9a 7a 18 45 a1 7a 89 bb b1 3e 34 94 b8 97 64 2b 3d 20 6f 09 49 3d d6 ca 9c 7c 13 9d 9f 51 c8 79 73 Data Ascii: l%>xv;s8{?s>Mh+yloDNBM5?J7oVq$_y!+KdC,5(a>a@+bWfyZTgwNP$;kezO2"zEm*zEz>4d+= oI=\|Qys
2024-05-21 09:21:33 UTC	6990	IN	Data Raw: 42 3d 87 a7 99 78 83 66 9a f2 60 a9 62 e6 04 bb 6e d2 04 88 0f 53 d5 5b 44 5e 1b 53 20 aa cd c4 fe 0c c0 53 9a dd 4a ae 7a 2c f2 db 64 61 8a 06 a5 8a d6 0a 1f 94 ea 2d 83 c5 c1 44 77 a5 47 34 b8 5b 31 7b 88 16 aa 7e 12 af bd b2 92 3c 26 5f b9 55 92 41 97 34 4b e7 d0 94 bf b1 12 1f c2 89 81 40 aa ae b1 ad 97 14 a0 98 a6 af 0f 36 ca 40 bc c3 a0 80 45 a7 aa 95 5a b7 62 75 c0 f2 ad 37 1c 4c cc e7 4d e2 28 40 dc 89 1f da a6 2e 49 49 26 1d 13 72 66 ee f1 e2 82 91 6b 81 31 d1 15 c6 7a c0 3a da 0f 45 4d 90 82 fc a4 2f 7e d7 77 1d 9b 31 01 14 c2 93 cf de 24 4a b6 34 a8 b5 a9 be e7 2c b0 71 b6 40 de 6f 48 2c 3a d7 38 05 70 80 26 71 d8 34 c3 80 28 a6 50 57 0a 7b f5 26 9a 44 65 45 1f a2 28 04 fd b3 43 68 6e 90 ce 40 25 1b 47 c0 4e 3a 27 df 56 2a a6 fd e8 f7 e1 7c da Data Ascii: B=xf`bnS[D^S SJz,da-DwG4[1{~<&_UA4K@6@EZbu7LM(@.II&rfk1z:EM/~w1$J4,q@oH,:8p&q4(PW{&DeE(Chn@%GN:'V*\|
2024-05-21 09:21:33 UTC	251	IN	Data Raw: c5 db 21 7b b3 02 61 19 bd f0 8d 71 1d 1b c3 aa 75 c6 55 cb 84 e6 53 12 b5 01 bf 67 71 40 56 36 4d 43 da 33 68 9b 2b ef 51 e7 78 80 35 ea 87 66 4b 39 62 b7 04 e9 9d d0 35 3f ec b4 37 d0 27 d5 61 b6 be 3b f4 9e 12 e6 24 ff 29 2e 06 6e 7f 74 c1 9f ff fc f3 17 29 fd f8 fd 8f 53 7f fd f1 27 7d a5 fd fe c7 17 df b4 d2 1f 7f fa 8d 6e fe f8 fd 8f e9 0b 9e 7e fc e9 75 b6 fa fd 8f 63 91 4e 3f d7 17 af c9 ec 75 96 26 f3 44 7f 4d 0f ab 1f bf ff f1 f8 4a a8 1f 7f 5a 6b bf ff 71 7d 2f 92 d3 8f 3f 69 7f d0 96 ba f6 ba 7c 5d bf cc 7e ff e3 72 ba 1f f0 e1 7e f8 f1 a7 ff f1 e3 90 7e 9e de ef c5 ed f4 8e db cb a1 68 6e 3f fe f4 df 7f 64 a7 e6 f4 ae de 41 7a 78 4f f2 3f 34 a7 fb 8f 7f f9 eb 5f ff e5 f7 3f 92 42 dd f2 1f 51 f7 1f 7f fd 9f d3 16 62 04 00 26 01 00 Data Ascii: !{aquUSgq@V6MC3h+Qx5fK9b5?7'a;$).nt)S'}n~ucN?u&DMJZkq}/?i\|]~r~~hn?dAzxO?4_?BQb&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.9	49857	147.182.216.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1015	OUT	GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:33 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:21:33 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.9	49867	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	663	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 2862 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	2862	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:33 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:33 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT x-envoy-upstream-service-time: 9 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 35 35 35 65 64 38 62 32 2d 66 61 66 38 2d 34 39 39 34 2d 61 63 61 38 2d 34 62 31 36 35 39 37 33 64 62 61 65 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"555ed8b2-faf8-4994-aca8-4b165973dbae","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.9	49858	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	2792	OUT	GET /trinity.json?key_maker=%7B%2210162a92428bf608%22%3A%22177369c437c672237248%7C160x600%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3709d71a-8b92-4e14-acfc-4968aee94daf&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%2202588b9a-5621-48fe-8382-ec8a2882ccd6%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20 [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-45be-b12f-751883821122
2024-05-21 09:21:33 UTC	752	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:33 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:32 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxno; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:33 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 30 31 36 32 61 39 32 34 32 38 62 66 36 30 38 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"10162a92428bf608":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.9	49873	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2324 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	2324	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:33 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:33 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 65 62 66 32 65 63 38 62 2d 66 62 62 66 2d 34 31 65 36 2d 62 64 65 63 2d 62 63 37 37 33 38 32 64 36 38 63 65 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"ebf2ec8b-fbbf-41e6-bdec-bc77382d68ce","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.9	49876	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1276	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1678 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=HpO14ecgD87KKrN63ZcHkEXJUpDJS4APRQJAUFTUFAlDgUpe0MvVQVuUVJXU3wOUXJ7RnkUH3hVVwVScwBWc3MXLVMBbFBQAVF9WQd4fUdsGhFsUFICUXQIBHoqEXgCAW1XUVtRIgAOe3pQYhQFaVQEVVZ3AAR4e0V5AwtoUFZSAn0OVn1pXmwAAG0CU1MEIgxUfy1ALwdRbVUGVFImDgFpZ1B4BQQ7Vl1SX3VZVH1%2FQHkCB2JVA1ACIgsVZ2lEfQFSbFIDV1YlWwF%2FeUV6AgtsBV0GBSYaG2l9QX5QB2hRAVFQclxVKS1FdgIGOQFcWwVmFBV9eEEtAQU%2FVVJXUXEJAHwqEXZQVzhaAFJFaBoBeC8UKgQGaFZRAVAlWlV7eRR%2FAwBsVlNBOmgaVCQ%2BHDoUCWpPRwQDNEoVcTAPYhRAPxAWCggqGg1pfxEoAgY%2BAldOVSBdU2Z7QipSHmwBVgZKIVwOf3oWLQMKYldRQUtmW1glJRctQlo1DSwHRX4aAX4pQH8HCj8FBFVUJltVfypFflIGYgEHQRo%3D
2024-05-21 09:21:33 UTC	1678	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 35 37 30 2c 22 62 69 64 49 64 22 3a 22 31 35 39 34 62 65 31 34 35 33 33 35 62 38 39 38 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 34 33 34 31 65 62 38 61 2d 63 61 64 61 2d 34 64 30 61 2d 39 66 63 31 2d 66 65 30 66 65 36 34 66 35 38 35 66 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 32 35 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291570,"bidId":"1594be145335b898","referrer":null,"adUnitCode":"mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["300x25
2024-05-21 09:21:33 UTC	1161	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=FAo13ggGSOVMQMgE6bHEU3Mj0iIzQ%2FFGcMOUVRdGQuYH8zfVYkVVRTVXBne257N3RXcQFAS0VxYSljemksX31TAQJVcWB6NHtoLFd2AFdFS2VlfGEsZ31XdgcDBFFzYXhieWl7AX0PUlZFa3F5ZXowe1Z2DlFUV3Bkem5%2FYn5WIA9UBlFlf21gfmYsUXVVBFMEczV9N3wzelEmAVcFUXFxY3R7YnoGcA5TX1YmMHlif2Z5U30ABFQCIWBtem9nflAkAFMBU3YyLGB5Y3pTcQ5UAV8iMS10YXN7VHVQVlVVI2F4YCkzLwFyDlZSBCVqdzRvfW9RdgUBUFEiZXhie2R8UHJXAV8BIzF2M3xzYUVzBQYBA3VmfWN5M3oGJ1RSVQF2ZnxgeGdvOmkUAQgSKSdtbH19bwAhRhBFXTwuY3Q%2BND4ULFkMRV1lZywweWQpBncbUAMCI35%2FZik1YFEnBQdKAiNqe2cpMnhefQJWRUtlMCA4IzQuEyxZDC4DZWltYHgzf1Z0DwcBBnFgLTUvZSxQdVJXXwUlcTI%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:33 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 22664 date: Tue, 21 May 2024 09:21:33 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:33 UTC	7222	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 0b 93 a3 56 16 26 f8 57 6a 2a 36 e5 f2 b8 33 cd 4b 12 d8 ad ee b8 bc 04 92 40 e2 0d 9a 9a 50 f0 12 20 9e 09 48 20 b9 9c bf 7d e3 82 32 2b d3 6e 4f f7 ec 4e c4 ee 4e 6c 3a 32 81 fb 3c dc 7b ce 77 be 73 2e e5 df 3e d7 61 73 ce da e6 f3 2f ff ed b7 cf 7e 59 a6 49 08 ef ff fb df 3e bb c1 e7 5f 3e ff fd bf 3c 3e 7e e2 7a 3f 76 8b 28 fc e5 d3 b6 0a 0b fb 13 ab ed 44 f6 97 4f 53 62 3a a3 28 1c 9b 7e 62 54 f8 4c cc 11 04 21 11 12 25 a6 e4 0c 47 10 1c 41 10 6c 8a 20 08 42 20 33 04 f9 f4 f8 f8 8f bf 07 c9 e5 53 12 2c 7e f0 42 d7 2f 8b 03 36 9b 11 d3 1f 3e 35 ed 35 0b 17 3f 54 65 93 b4 49 59 fc e2 7a 4d 99 9d db f0 d7 2c 3c b6 bf 20 55 ff e9 d7 b6 ac e0 cd af 97 a4 49 bc 24 4b da eb 2f 71 12 04 61 f1 eb 0f ff f8 7b 92 47 9f 9a da Data Ascii: V&Wj*63K@P H }2+nONNl:2<{ws.>as/~YI>_><>~z?v(DOSb:(~bTL!%GAl B 3S,~B/6>55?TeIYzM,< UI$K/qa{G
2024-05-21 09:21:33 UTC	15442	IN	Data Raw: 02 a6 43 c3 7d 11 48 02 68 78 55 f1 4b 60 66 6b 85 06 91 18 49 32 1b 95 ba 85 19 8a a2 36 8e ad a5 11 db 77 36 83 88 a6 18 71 2e d3 c9 c7 7d ce 0f fd 34 a0 a0 db 8c 5e 9b 31 7d 3d 66 81 09 d0 5e 07 85 ba 06 7c b7 06 38 4f 32 1d aa 01 45 14 82 94 b3 54 6e ca 48 1a c9 d0 aa 22 99 b4 b4 e5 fb bd a6 47 6a bf 41 fb c0 cc 50 c3 28 64 86 e5 e9 c0 2c b8 c6 36 7b d3 e6 69 cd cf 38 47 8b 5b 4f 64 ca cd 92 33 43 0e 0d 10 2d 42 24 93 07 c5 11 94 32 40 3b 00 0a 95 a5 b3 ec 08 f0 fe 01 e3 6d b8 36 a9 c8 88 31 6a 2e 23 33 60 b5 4c 32 53 53 03 91 d9 ab 80 f7 6d 85 c7 d6 5d 7b a4 4d 59 a1 b5 d5 da 50 b2 bd 71 5d 5d 94 94 30 58 a3 e1 f6 46 6a 59 68 c7 ec 04 ca b3 39 53 e4 7a 23 e7 05 44 d2 a3 38 0f d1 66 65 98 ca 92 66 64 da cc 28 c3 c0 e9 19 03 10 da 06 80 11 53 91 d5 52 Data Ascii: C}HhxUK`fkI26w6q.}4^1}=f^\|8O2ETnH"GjAP(d,6{i8G[Od3C-B$2@;m61j.#3`L2SSm]{MYPq]]0XFjYh9Sz#D8fefd(SR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.9	49869	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1196	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1315 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=n2Q13oGt38w0D71YU2FGUEUkoDXiFFQntvaU1xRwddTgh0A1M7ZlELcRdWXEUAJwQGbDcQQ2VBVQtCAyEFCT1iBlt2FwMIRgcgVFRuNlBNa1YFC0BVdQUDa2QKXiIWUQkTA3ECBTtkUFhlWBENEQMhAwFhbFENcENSDkcAdQBSOmEHC3NWHxpCVncCAjwzBAtwQAcJFAB0BgY9NldYJBARFFUGdlFUbGJRDSMSBAoTBHEECWhmBlp2RFIaWxJyAwZvZQpfchZVDUYCJQBSP2wEWXdHBglVHGYBAmtkUF9%2BQgQJRghwAgk6ZAtecxUGDUISGRsTOjpHATNWCQhbEiNTQSt3CBQ6WBFLEkM3Xl43dwhNcRADDEJRfA4cPWBRXmpDAAESHSEPCD14AFl%2BF1IPFVZyD1Vtdx5NJBtdVhJTMF5eNxxWTX1WBQtAVXICBW8xVwwlTAFcQwV2BAc%2FZVRXZQk%3D
2024-05-21 09:21:33 UTC	1315	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 35 35 39 2c 22 62 69 64 49 64 22 3a 22 31 34 35 35 35 33 36 64 33 32 64 64 30 65 62 65 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 37 66 30 66 35 62 61 38 2d 66 66 39 38 2d 34 64 36 61 2d 39 35 64 30 2d 34 32 37 62 37 61 32 65 31 33 37 37 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291559,"bidId":"1455536d32dd0ebe","referrer":null,"adUnitCode":"mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"",
2024-05-21 09:21:33 UTC	1080	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_3646a4db=D3t11MwhGUjh0V4DNlUYJiceBlUkR2Z3LEpxZl4NCW4EcC8VWyQxXAtVMgZ0LkRfcjdIRBJjUnd4RA11bQ5fBGIFJ31HWXAxCQ0HNVZmYVVedGIPWQJkBnV1Rg0lN1sMA2MBcC9GCnB3RkoFMAcheUdQfjYIXwc3AnR9Rl8kNl5dVGIWaG9CDnRgWQ1WYFBzeUNZJGVaWQcyVyF6FAxleUheAjBRcXoUCiMzXVpUYgF3dUZbc2BbWFF0GGZ7Q19xZVJYBTRScXxFCXA2DFEGYAR3eEZKa3dcWwJnVnR0QV92ZFJcBW5XdXRGXCZgX10SCxhmLhgdKSFIUgB6FiMpBxplbxEVHHRHIT4EASg7SFISYFB0eUIJf2xHDAU1BWl6RFEieA9QCTIZdntOCyZiCA4GblBwb1tKJDoEBlU1QC0iGSEjd1BKBmUDIXtCXHExDwtSbgYgeUJadGMMWFZuFjk%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:36:33 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 23530 date: Tue, 21 May 2024 09:21:33 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:33 UTC	13395	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 8b 73 a3 48 d6 2f f8 af 78 1c 6b b5 7d bb ec 06 f4 ae 1a cd 44 26 90 12 58 20 f1 4a 09 8d 27 14 28 41 80 84 00 03 12 92 7b ca 7f fb 46 82 e4 47 55 f7 cc b7 df de 8d dd bb 71 5d 51 16 79 f2 41 66 9e 73 7e e7 91 29 ff 7e 9d 79 f9 3e 2a f2 eb af ff f8 fd 9a 24 c9 36 f4 e8 f3 3f bf 5c 3b ee f5 d7 eb bf fe e5 fe fe 8a cf 3c a7 08 0f de 55 ab cd 30 ad 66 bb d7 bc ca bd ec e0 b9 57 ab d3 95 e2 ed 56 5e 76 c5 b2 bd 1e 77 75 08 9d 2b 90 a6 aa 77 dc e7 57 f7 f7 7f fb ab 1b 1e ae 42 77 f0 74 bd 8b bd e2 fe 50 f8 c5 bd c3 10 a7 df 71 d9 b6 d7 5a f7 5a ae 4b d6 5c cf e1 56 ab 5e df e3 b8 15 69 3d 5d ff ed af 39 c9 c2 b4 38 f7 54 79 fe e9 fa 2a 72 62 7f ef f8 de e0 e9 7a e3 1c 9c ba c5 d3 f5 df 96 cb 95 eb 14 ce e0 e9 3a 77 b9 9b a6 Data Ascii: sH/xk}D&X J'(A{FGUq]QyAfs~)~y>$6?\;<U0fWV^vwu+wWBwtPqZZK\V^i=]98Tyrbz:w
2024-05-21 09:21:33 UTC	10135	IN	Data Raw: 3c 42 54 e9 80 b4 b1 26 f3 20 8f 26 7a 2f e4 01 59 9b 3e a9 7d 96 4a 3a c5 15 0f 98 3d 8a 7a 9c 7c b6 d4 26 48 e1 84 41 60 7a d4 da 63 5e 9c 62 64 79 22 cb 90 b1 4f 4a 4d 2b 87 f6 3c 32 60 a4 12 b3 5c 88 a0 b4 a7 40 6b 27 72 b3 b0 40 89 c9 08 48 d6 fc e2 0d 9c 7d dd 31 22 00 81 44 10 66 69 cb d3 55 01 c0 c0 c1 40 1d 9e df 71 50 f8 c4 b4 b7 3d 71 38 27 8f 62 69 7b 02 26 dc 88 63 57 2b 5d 5b 8b ac 0d 27 8c a8 6b 56 c1 4d 86 8c 45 75 b4 96 11 b4 c0 be bb 27 f3 1c 80 92 48 34 7a 01 58 b5 ac 72 91 cb 06 3b c7 65 5f c2 01 20 d0 6f 55 b6 43 0a f3 a3 25 6a 8b da 8b 2c d7 55 04 c2 db 53 8c b7 2e 4f 3d 5d 4d f4 04 51 4c cf 72 93 8a 5b e0 f2 be fd 62 f9 6e 51 c7 24 db 35 12 6d 30 a2 b6 63 a6 c8 94 86 b1 42 44 6a 3b 70 34 81 54 77 8c 12 cc 45 7b 2c b2 16 a1 b4 ca df Data Ascii: <BT& &z/Y>}J:=z\|&HA`zc^bdy"OJM+<2`\@k'r@H}1"DfiU@qP=q8'bi{&cW+]['kVMEu'H4zXr;e_ oUC%j,US.O=]MQLr[bnQ$5m0cBDj;p4TwE{,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.9	49875	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1196	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1791 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=n2Q13oGt38w0D71YU2FGUEUkoDXiFFQntvaU1xRwddTgh0A1M7ZlELcRdWXEUAJwQGbDcQQ2VBVQtCAyEFCT1iBlt2FwMIRgcgVFRuNlBNa1YFC0BVdQUDa2QKXiIWUQkTA3ECBTtkUFhlWBENEQMhAwFhbFENcENSDkcAdQBSOmEHC3NWHxpCVncCAjwzBAtwQAcJFAB0BgY9NldYJBARFFUGdlFUbGJRDSMSBAoTBHEECWhmBlp2RFIaWxJyAwZvZQpfchZVDUYCJQBSP2wEWXdHBglVHGYBAmtkUF9%2BQgQJRghwAgk6ZAtecxUGDUISGRsTOjpHATNWCQhbEiNTQSt3CBQ6WBFLEkM3Xl43dwhNcRADDEJRfA4cPWBRXmpDAAESHSEPCD14AFl%2BF1IPFVZyD1Vtdx5NJBtdVhJTMF5eNxxWTX1WBQtAVXICBW8xVwwlTAFcQwV2BAc%2FZVRXZQk%3D
2024-05-21 09:21:33 UTC	1791	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 35 36 35 2c 22 62 69 64 49 64 22 3a 22 31 35 35 39 65 32 65 66 37 65 38 31 37 35 63 39 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 34 33 34 31 65 62 38 61 2d 63 61 64 61 2d 34 64 30 61 2d 39 66 63 31 2d 66 65 30 66 65 36 34 66 35 38 35 66 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291565,"bidId":"1559e2ef7e8175c9","referrer":null,"adUnitCode":"mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"",
2024-05-21 09:21:33 UTC	1005	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_3646a4db=W9R14F2DYVEFSLtCv11PRA0OCQxKDY%2BB2FMahNwAXA8b312Zy4WcBVVByVXIGtmJnVkeRZhWhMEIAFxajN3fjd7QHdHUgF2A3M9NSBxMC5Wb1QHAnFXdWtkd3drfREhFABVdQdxbTR0JGRuWGFDVwIjBnRhbyYkZHsVdUYBAHFRJ21jIXJxYFZ2EAIEdVcibzJycmd9F3NGAAYiUSFuNSFkf25Cd0EHAX4CcTswcHdhLUMgEAgHcAJ3bGdnanF6R3FHUwF%2FBHNoZ31yZnQXck8ABScHcWx0aWRlfhImQwZSJFYibmQhcmZ%2FTHJFBQR3AiV7C2lkMCMBLQITC3YeZj4yNTRxdg8%2BWhNCI0E3MDkrZGluQidGBQQnCn10MnAlYmFDcE9UHCMKfT17d3BqLxV0FFcHflZwe3pnJTwiGiYVRVgpXA09dH9kZX9DJkAEBXBWITo0fXQ3eEFxRQdXdlR8eys%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:36:33 GMT; Secure; SameSite=None date: Tue, 21 May 2024 09:21:33 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.9	49874	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	2585	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:33 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:33 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 33 37 32 30 65 64 38 32 2d 36 61 63 31 2d 34 38 64 36 2d 62 61 39 65 2d 65 36 61 66 32 35 65 63 33 34 36 33 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"3720ed82-6ac1-48d6-ba9e-e6af25ec3463","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.9	49888	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	3026	OUT	GET /trinity.json?key_maker=%7B%22131160d90f6a1f9e%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3ba70010-bc4c-455f-9e7b-ada9bdb499f7&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22555ed8b2-faf8-4994-aca8-4b165973dbae%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20 [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-45be-b12f-751883821122
2024-05-21 09:21:33 UTC	760	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:33 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:32 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxno; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:33 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 33 31 31 36 30 64 39 30 66 36 61 31 66 39 65 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"131160d90f6a1f9e":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.9	49878	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	3061	OUT	GET /trinity.json?key_maker=%7B%2216716bff893cdd02%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=5f8c3e71-98dd-4042-8e46-0425cc913dd0&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fbe6b6ea-d48e-4ade-aa54-7827a1dd0cee%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20 [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-45be-b12f-751883821122
2024-05-21 09:21:33 UTC	760	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:33 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:32 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxno; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:33 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 36 37 31 36 62 66 66 38 39 33 63 64 64 30 32 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"16716bff893cdd02":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.9	49887	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	663	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	3335	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:33 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:33 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT x-envoy-upstream-service-time: 1 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 66 62 65 36 62 36 65 61 2d 64 34 38 65 2d 34 61 64 65 2d 61 61 35 34 2d 37 38 32 37 61 31 64 64 30 63 65 65 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"fbe6b6ea-d48e-4ade-aa54-7827a1dd0cee","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.9	49864	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	608	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 797 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	797	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 31 33 33 33 65 32 37 61 31 32 37 63 35 36 34 31 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 67 70 69 64 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"1333e27a127c5641","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"gpid":"/20842576,230782
2024-05-21 09:21:33 UTC	977	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 140 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 70ac08c7-6cf2-4835-8009-8ac7fe1c03ca Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:33 UTC	140	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 31 33 33 33 65 32 37 61 31 32 37 63 35 36 34 31 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 38 39 37 36 33 31 34 30 31 30 36 30 32 34 31 33 37 38 34 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"1333e27a127c5641","tag_id":32542723,"auction_id":"8976314010602413784","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.9	49865	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1478 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	1478	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 39 31 35 35 34 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283291554,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:21:33 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 8 server: istio-envoy
2024-05-21 09:21:33 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 33 36 62 39 33 63 61 31 63 39 36 39 30 30 37 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"136b93ca1c969007","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.9	49868	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 2873 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1716283291_1716283291; amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:21:33 UTC	2873	OUT	Data Raw: 7b 22 61 22 3a 22 36 31 62 62 62 64 34 31 2d 62 36 30 38 2d 34 66 33 35 2d 61 34 32 36 2d 65 30 33 66 61 39 61 38 32 32 64 34 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"61bbbd41-b608-4f35-a426-e03fa9a822d4","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:33 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=2_1716283291_1716283293; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:33 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 46 connection: close
2024-05-21 09:21:33 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4e 6a 46 69 59 6d 4a 6b 4e 44 45 74 59 6a 59 77 4f 43 30 30 5a 6a 4d 31 4c 57 45 30 4d 6a 59 74 5a 54 41 7a 5a Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkNjFiYmJkNDEtYjYwOC00ZjM1LWE0MjYtZTAzZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.9	49861	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1372 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:33 UTC	1372	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 32 33 62 36 65 65 30 63 61 34 64 64 34 61 32 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 64 38 33 34 30 35 34 64 2d 62 61 38 66 2d 34 30 30 32 2d 62 66 35 66 2d 62 66 34 65 31 39 62 37 31 64 63 34 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 Data Ascii: {"Version":"1.0","Bids":{"123b6ee0ca4dd4a2":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"d834054d-ba8f-4002-bf5f-bf4e19b71dc4","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monu
2024-05-21 09:21:33 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:33 GMT content-length: 181 x-envoy-upstream-service-time: 70 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:33 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 35 63 66 61 64 61 37 39 64 64 34 32 39 38 64 31 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 35 63 66 61 64 61 37 39 64 64 34 32 39 38 64 31 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 31 32 33 62 36 65 65 30 63 61 34 64 64 34 61 32 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"5cfada79dd4298d14bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"5cfada79dd4298d14bfb0857db316efd","BidID":"123b6ee0ca4dd4a2"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.9	49872	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1483 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	1483	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 39 31 35 36 33 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283291563,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:21:33 UTC	497	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 10 server: istio-envoy
2024-05-21 09:21:33 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 35 30 38 66 39 61 65 65 35 63 35 31 61 39 36 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"1508f9aee5c51a96","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.9	49859	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	624	OUT	POST /g/v2/1013.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 654 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	654	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 22 3a 31 30 31 33 2c 22 67 64 70 72 22 3a 30 2c 22 6e 62 50 61 67 65 22 3a 31 2c 22 6f 22 3a 22 70 62 6a 73 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 74 6f 70 22 3a 31 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 76 22 3a 22 38 2e 34 36 2e 30 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 74 79 70 65 22 3a 22 68 74 6d 6c Data Ascii: {"partner":1013,"gdpr":0,"nbPage":1,"o":"pbjs","tml":"https://custommapposter.com/article/top/926","ref":null,"cu":"https://custommapposter.com/article/top/926","top":1,"u":"https://custommapposter.com/article/top/926","v":"8.46.0","storage":{"type":"html
2024-05-21 09:21:33 UTC	681	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:33 GMT p3p: CP="CAO PSA OUR" set-cookie: 3pi=; Path=/; Domain=id5-sync.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1; Path=/; Domain=id5-sync.com; Expires=Mon, 19 Aug 2024 09:21:33 GMT; Max-Age=7776000; SameSite=None; Secure access-control-allow-origin: https://custommapposter.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:33 UTC	593	IN	Data Raw: 32 34 41 0d 0a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 6f 74 5f 6e 47 45 63 42 36 71 6a 35 78 79 34 77 65 51 5a 36 35 4a 34 47 79 4a 71 54 79 59 62 67 31 7a 4e 65 66 7a 39 65 78 51 4c 58 59 6a 58 6c 35 73 49 4d 45 76 31 78 5f 63 6d 39 6f 45 62 66 32 32 32 46 38 6e 30 69 61 34 49 61 46 7a 70 36 30 71 63 77 38 33 44 79 52 51 62 75 43 6a 47 78 7a 45 35 39 4e 56 68 56 58 32 6f 4e 6a 59 6d 50 44 34 2d 51 30 4d 38 68 64 36 73 38 55 39 6d 50 36 33 79 53 4f 79 45 6d 69 4f 43 64 39 59 47 33 7a 41 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 31 54 30 39 3a 32 31 3a 33 33 2e 36 30 35 32 38 39 32 34 38 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 22 3a 22 49 44 Data Ascii: 24A{"signature":"ID5_Aot_nGEcB6qj5xy4weQZ65J4GyJqTyYbg1zNefz9exQLXYjXl5sIMEv1x_cm9oEbf222F8n0ia4IaFzp60qcw83DyRQbuCjGxzE59NVhVX2oNjYmPD4-Q0M8hd6s8U9mP63ySOyEmiOCd9YG3zA","created_at":"2024-05-21T09:21:33.605289248Z","id5_consent":true,"original_uid":"ID
2024-05-21 09:21:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.9	49860	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	349	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	309	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:21:33 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:33 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 75 41 67 56 6c 77 62 75 54 46 51 36 48 4e 5a 71 56 69 59 38 6d 67 3d 3d 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"lb":"uAgVlwbuTFQ6HNZqViY8mg=="}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.9	49862	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2002 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	2002	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 39 31 35 34 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 32 35 33 65 65 32 63 65 34 35 37 33 64 35 37 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 38 32 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 48 2e 43 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 48 2e 43 23 68 65 61 Data Ascii: {"id":"1716283291545","at":1,"cur":["USD"],"imp":[{"id":"1253ee2ce4573d57","tagid":"1433182","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDH.C"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDH.C#hea
2024-05-21 09:21:33 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.9	49877	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	2294	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 39 31 35 37 30 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 36 31 61 38 61 37 62 66 37 33 63 36 34 36 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 23 72 65 70 65 Data Ascii: {"id":"1716283291570","at":1,"cur":["USD"],"imp":[{"id":"161a8a7bf73c646","tagid":"1433179","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F#repe
2024-05-21 09:21:33 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.9	49871	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1194	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291547&to=240&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	626	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 470 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:33 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Set-Cookie: vst=e_b6394703-ad16-4e93-bf0f-f4827bb2147b; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:33 GMT; Path=/; Secure; SameSite=None Timing-Allow-Origin: *
2024-05-21 09:21:33 UTC	470	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 62 36 33 39 34 37 30 33 2d 61 64 31 36 2d 34 65 39 33 2d 62 66 30 66 2d 66 34 38 32 37 62 62 32 31 34 37 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 6e 75 6c 6c 2c 22 6c 61 62 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_b6394703-ad16-4e93-bf0f-f4827bb2147b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":null,"lab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.9	49882	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3339 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1716283291_1716283291; amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:21:33 UTC	3339	OUT	Data Raw: 7b 22 61 22 3a 22 61 61 30 30 66 34 63 65 2d 62 36 38 35 2d 34 30 34 35 2d 38 61 38 35 2d 32 33 39 31 34 30 32 31 34 32 32 32 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"aa00f4ce-b685-4045-8a85-239140214222","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:33 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:32 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=2_1716283291_1716283293; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:33 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:21:33 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 59 57 45 77 4d 47 59 30 59 32 55 74 59 6a 59 34 4e 53 30 30 4d 44 51 31 4c 54 68 68 4f 44 55 74 4d 6a 4d 35 4d Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkYWEwMGY0Y2UtYjY4NS00MDQ1LThhODUtMjM5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.9	49886	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	608	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 942 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	942	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 31 37 33 32 62 32 62 32 36 66 30 39 37 33 36 35 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["video","banner"],"uuid":"1732b2b26f097365","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"
2024-05-21 09:21:33 UTC	1567	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 145 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: c6ce965a-1957-4fdd-ac6f-7ea0f15dfb92 Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:33 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChkI__eVARAKGAEgASgBMJ3PsbIGOAFAAUgBEJ3PsbIGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:33 UTC	145	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 31 37 33 32 62 32 62 32 36 66 30 39 37 33 36 35 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 33 34 34 36 34 33 36 36 33 30 36 35 35 36 36 32 38 36 30 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 35 30 31 34 34 34 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"1732b2b26f097365","tag_id":32542723,"auction_id":"3446436630655662860","nobid":true,"ad_profile_id":501444}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.9	49892	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	699	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180389 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.9	49881	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1374 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:33 UTC	1374	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 36 35 38 38 33 64 30 64 65 61 37 62 39 34 66 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 39 34 35 39 65 34 32 62 2d 31 63 38 34 2d 34 38 32 31 2d 61 37 36 65 2d 30 61 31 61 64 63 33 64 65 62 36 62 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"165883d0dea7b94f":{"PlacementID":"ffd2f3e5d8d521d3e956b94b85e3cf84","TransactionID":"9459e42b-1c84-4821-a76e-0a1adc3deb6b","Width":300,"Height":250,"AvailableSizes":"300x250","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:21:33 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:33 GMT content-length: 181 x-envoy-upstream-service-time: 126 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:33 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 35 62 66 39 64 32 63 39 33 39 33 32 66 30 34 62 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 35 62 66 39 64 32 63 39 33 39 33 32 66 30 34 62 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 42 69 64 49 44 22 3a 22 31 36 35 38 38 33 64 30 64 65 61 37 62 39 34 66 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"5bf9d2c93932f04bffd2f3e5d8d521d3","Placement":"ffd2f3e5d8d521d3e956b94b85e3cf84","CreativeID":"5bf9d2c93932f04bffd2f3e5d8d521d3","BidID":"165883d0dea7b94f"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.9	49883	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1405 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	1405	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 36 61 30 62 64 63 33 2d 66 33 65 61 2d 34 31 30 61 2d 61 32 30 32 2d 30 31 34 38 39 37 62 64 64 34 32 36 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 Data Ascii: {"id":"96a0bdc3-f3ea-410a-a202-014897bdd426","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-f
2024-05-21 09:21:33 UTC	181	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.9	49885	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1200	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291568&to=240&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	626	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 470 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:33 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Set-Cookie: vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:33 GMT; Path=/; Secure; SameSite=None Timing-Allow-Origin: *
2024-05-21 09:21:33 UTC	470	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 6e 75 6c 6c 2c 22 6c 61 62 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":null,"lab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.9	49893	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	364	OUT	GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	296	IN	HTTP/1.1 204 No Content content-length: 0 date: Tue, 21 May 2024 09:21:33 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.9	49889	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1716283291_1716283291; amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:21:33 UTC	265	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT server: envoy vary: accept-encoding x-envoy-upstream-service-time: 0 connection: close
2024-05-21 09:21:33 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.9	49898	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1305	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1668 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	1668	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 38 37 32 2c 22 62 69 64 49 64 22 3a 22 31 37 37 34 30 30 32 37 65 31 65 37 62 31 35 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 37 62 64 65 31 36 62 35 2d 34 31 34 66 2d 34 63 39 39 2d 62 34 35 61 2d 32 35 39 32 34 30 61 38 30 31 65 30 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 37 32 38 78 39 30 22 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291872,"bidId":"17740027e1e7b15","referrer":null,"adUnitCode":"mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["728x90"
2024-05-21 09:21:34 UTC	1267	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=wUc15n5z5WCuUua35IyYFRcKVCU3GzAHEhEPEltvXQIbA2UhRWQUAgUBe05tWg1MU25zQWJXTREDex9sWQ0bDW8mFjBHVwAAK09gDwVJA2JhWXdDUgRUf0lpXQQbVmF3R2JBVQsDL0FgXgRYGXV1RmIRUQIBfkA6XQNIB2Z0FjQWAAsFKE57QhdMBmAiQ2RGWQAGeU5uWw1IBmRyEGxDAAUXZVtvXQIbA2cgE2EWVVUHKEg7WQMZAmIhQ2NXTREDek44Ww1LDWYiFmNBUwQBfUFvCAYfU2RhWXdDUgRUf0g%2FWgQbVmF3R2JBVQsDL0E8DFdYGXV1RmUTVQEHLUtuWFEYVzF0TWFAAlEMcRt7QhdMBmAiQ2dNBAJUKk9tXAJOAW91E2xFVQEXZVtvXQIbADEhFmZGUQQCfEFrXQZLUG51TWNXTREDeh0%2FCgdPB2J3F2IUA1EFex9oWwZMAGFhWXdDUgBWfk88WAJOA2JyQmIUAgtTLRtgCwRYaHthFjoAD0cXc0l1TFIeRSVhTy4ITRFGLAoqB1oUF21hQTYTVQZRKEt0XFEfUXpzRTERTAVXehx0C1FDAWYnFmBMWQcBa1V7DVoUWzIgATwaD3pRa0N7WAAYB2ZyTDATAAUGKxo7WlRNBTN2TTcXQ04%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:34 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 32350 date: Tue, 21 May 2024 09:21:34 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:34 UTC	13985	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bb 09 af e3 46 92 2e fa 57 aa 0d b8 16 4c 1d 9b 9b 24 aa 3d 35 8d e4 92 dc 97 e4 4e 76 1b 82 b8 ef 94 44 4a 94 68 f8 bf 5f 50 e7 b8 bc 74 f7 cc 5c bc 87 87 77 e7 b6 80 83 23 65 46 66 44 46 46 7c b1 50 fa e9 9b 4b 36 5e db 69 fc e6 cf 7f fd e9 9b 64 18 9a 2a 5b df ff f8 f9 9b 63 fa cd 9f bf f9 f7 31 b9 54 a7 e9 dd 78 49 be fc ed 9b 72 9a 4e e3 9f bf ff be 7f 74 f8 4b 15 7f 77 4c fb fb f8 5d 32 74 df 1f e3 bf 1c fb c3 f1 9a 56 d3 17 ec fd 25 cb b3 cb 25 bb 7c 79 2e f8 96 04 df 12 f0 5b 02 26 d7 71 1a ba ee 78 3a 0d e3 94 5d d6 85 df 12 f0 78 99 aa a4 cd be 25 e0 34 9c be 25 e0 9e d8 be cf be cc 67 e7 40 22 55 e2 0e 8c f6 00 09 00 40 03 78 01 20 40 55 ba ec 84 07 53 b2 f9 94 9d 55 fa fc d8 e0 ad 16 ee 5e 54 fa 1a 57 bb 17 bd Data Ascii: F.WL$=5NvDJh_Pt\w#eFfDFF\|PK6^id*[c1TxIrNtKwL]2tV%%\|y.[&qx:]x%4%g@"U@x @USU^TW
2024-05-21 09:21:34 UTC	16320	IN	Data Raw: 09 90 78 83 ec 22 ab f1 70 cc 7f 77 24 ea a1 1e 8d 65 cf f5 d8 71 3d 8e f3 a1 a2 bb 51 6c 30 91 b9 f7 da 6b af bd 91 79 89 d7 73 85 c3 0e 92 cb 6e 14 9e 1a b3 15 ce 79 b9 dc 94 24 dd 8e 73 a5 f5 4d 41 c7 49 b2 47 35 da f4 52 59 a6 b2 bc 37 45 9d e5 0b 5b 79 52 90 1e b6 61 ef 3b 43 fd f4 c6 47 f2 44 e5 d3 ca 33 49 90 a0 dd 94 27 4e 50 9f f6 80 d5 2a 6f 4b 54 2d 7a f6 8c f7 ca ed e7 9c 15 af c1 94 b9 db 90 5b 59 3c 5c 36 cd ad 64 aa 03 ad 72 ad 4d d7 1c e6 e8 56 26 a1 33 99 96 8b fe aa fb 9c 2b 69 5f e2 26 d8 c8 a2 62 8b 87 7b a9 7c b0 8d 55 37 83 b7 60 d1 5c 23 42 6e d0 7b 1b fe ae 13 59 4b 6f 63 03 77 ab 5f 27 32 65 ee a5 e2 0a 59 8e 17 fd f6 9d 59 b3 7a 6b 6d 47 8d 6e b9 5a 13 fb 53 59 b8 ef cf cd 50 f2 d6 45 97 90 b0 cb 78 4b b7 6c 35 06 f3 08 93 70 f6 Data Ascii: x"pw$eq=Ql0kysny$sMAIG5RY7E[yRa;CGD3I'NP*oKT-z[Y<\6drMV&3+i_&b{\|U7`\#Bn{YKocw_'2eYYzkmGnZSYPExKl5p
2024-05-21 09:21:34 UTC	2045	IN	Data Raw: 07 a4 bf 27 dc 61 c5 c3 3a 91 ba b0 dc 85 f5 98 03 31 80 81 4b 6c b9 f7 3c d9 ee 85 3e 85 b0 7c 0f 94 4c 91 e1 86 79 c4 3b 90 30 a9 14 a7 07 cb 91 9e cc 37 5b 33 44 cc 10 3b 48 55 a2 d2 76 51 5a b7 0d b2 6f 36 15 7d 0c 68 ff c2 20 79 dd 9b 72 09 a8 f5 35 9e 25 5e 22 79 eb 66 5e 2e 52 e2 5c 19 d0 47 72 58 9d 74 a3 52 6d 2d fc 69 7d 3f 4e e2 75 df 02 85 28 d0 64 2c 37 3e 24 0b 7f f1 f5 fd 8a ce 08 76 94 ed 9d 8a 7b 15 8e a5 89 4c b9 81 80 2c b7 d7 c1 77 6d 70 d9 8e 61 8d ec 5b 4d 45 4f 60 4b ae ae 02 d3 97 2d dc 13 c5 45 5d 11 b1 79 b3 ee f7 23 b0 61 a6 cb db af 36 62 7f 95 36 62 7f ea 90 f0 ef b7 12 bb 0f 9f c3 f5 fb cb e9 7f a2 95 58 7f 66 f6 ea 14 bc 8e f7 0c 8e 59 dd ae f6 37 2f 5d 03 22 c0 6f fe 30 be 48 58 a6 78 6c d0 9b b6 0f fc d2 d7 f1 e2 9e cc d8 Data Ascii: 'a:1Kl<>\|Ly;07[3D;HUvQZo6}h yr5%^"yf^.R\GrXtRm-i}?Nu(d,7>$v{L,wmpa[MEO`K-E]y#a6b6bXfY7/]"o0HXxl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.9	49896	159.223.146.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	935	OUT	GET /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=4GO13tj3WhEj2HICFfD0hDNhoxBFc6OmF8PVZcAGMNfFICfCshdQUQXFAyDHdaUXt%2BdiREWEgGMVtwWVd6cSdxUkBbUGdYdF1WKyx0JQRWRhFhW3IPA3p7cXdeRQ9RNVkhWQd9fSF3BENIH3VdI1lXfHl7fwUWXQQ2XnVaA38qIHJTEF4Re0pwDAF9eiYgUBBdB2NZJloCeX4nJQNDCVd1RGdcBn9%2Fc35WQQhVYll3CwUrL3pwUERZBmZKaUgEe3tyJFZNXARmWX1eB3Aqcn9XQAsGYl1nRhB%2BeyUjU0MJUTMOclhWfHxwfldHXgZmWCRIb2RrICkTGh4RbVhpSFUsOTFkXA8XH3UbIBlBISYtZFxWXFdnXHALCnFkJ3MFRUcEZFEgR1dwcCdrVEJTUDZfJwwEcC13ZEpWCVw5BiAJRiEmLQ8CVlARYVtyDwR9fXUiAxcIC2UMcV8Ae38ldgBMSE4%3D
2024-05-21 09:21:33 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:21:33 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.9	49908	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2315 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	2315	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:33 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:33 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 61 32 38 65 62 38 64 37 2d 30 62 39 62 2d 34 64 63 64 2d 39 62 37 33 2d 32 38 36 39 32 33 61 62 62 34 33 34 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"a28eb8d7-0b9b-4dcd-9b73-286923abb434","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.9	49906	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	663	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3326 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	3326	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:33 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:33 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT x-envoy-upstream-service-time: 7 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 66 64 31 32 62 31 66 61 2d 37 33 34 64 2d 34 37 30 61 2d 61 34 36 64 2d 36 36 37 35 63 35 33 39 37 64 38 33 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"fd12b1fa-734d-470a-a46d-6675c5397d83","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.9	49904	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1196	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=4GO13tj3WhEj2HICFfD0hDNhoxBFc6OmF8PVZcAGMNfFICfCshdQUQXFAyDHdaUXt%2BdiREWEgGMVtwWVd6cSdxUkBbUGdYdF1WKyx0JQRWRhFhW3IPA3p7cXdeRQ9RNVkhWQd9fSF3BENIH3VdI1lXfHl7fwUWXQQ2XnVaA38qIHJTEF4Re0pwDAF9eiYgUBBdB2NZJloCeX4nJQNDCVd1RGdcBn9%2Fc35WQQhVYll3CwUrL3pwUERZBmZKaUgEe3tyJFZNXARmWX1eB3Aqcn9XQAsGYl1nRhB%2BeyUjU0MJUTMOclhWfHxwfldHXgZmWCRIb2RrICkTGh4RbVhpSFUsOTFkXA8XH3UbIBlBISYtZFxWXFdnXHALCnFkJ3MFRUcEZFEgR1dwcCdrVEJTUDZfJwwEcC13ZEpWCVw5BiAJRiEmLQ8CVlARYVtyDwR9fXUiAxcIC2UMcV8Ae38ldgBMSE4%3D
2024-05-21 09:21:33 UTC	1782	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 38 38 32 2c 22 62 69 64 49 64 22 3a 22 31 39 31 62 37 32 34 30 63 30 61 63 35 37 33 65 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 37 62 64 65 31 36 62 35 2d 34 31 34 66 2d 34 63 39 39 2d 62 34 35 61 2d 32 35 39 32 34 30 61 38 30 31 65 30 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291882,"bidId":"191b7240c0ac573e","referrer":null,"adUnitCode":"mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"",
2024-05-21 09:21:34 UTC	1010	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_3646a4db=Gkl158SrsHIQjDNOpxiyQ3ECEjo9Pw82PW1KI0tPC2cXSnB5ZQgmfSwUTgocXGFCEHt%2BZAhmYm1FHlpMCzZASyx%2BZV51LX9ASV4dWzZFECprfUhxKHwVTFlBATAQRH8oZ1p0f3gTG11MXGdQX2p8N1lxfSoWTg1ODGdDEHh5YF0gLSpHGw1bFHFER39%2FYVJ0ey0WTVhLWWQRFXF%2FZ1p3e35SVEtPC2FDEXhwZ111f3dETVEaCWpDRyl8ZF9mYm1GS14cCWFAQXlxYA8mLH4US1xMDDFDEX9rfUhyfCkVTV4aWjcURHotZV93dn5DTFxICDJQLmRrMgUxIDtSQllVGjQWAzpraxE5Ym0DHRoKUTwcUXJrZw50enoRQFBUXGYRQmV%2BYlMhYypIQQ1UCmVLECl%2BMwxyditEWkVbWzwcHS0qJQMrIAYUWlNbDmBFFn58ZVwgKywSQFsdDGZAQH4vYQx8bDI%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:36:34 GMT; Secure; SameSite=None date: Tue, 21 May 2024 09:21:34 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.9	49909	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	653	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2576 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	2576	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat"
2024-05-21 09:21:33 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:21:33 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 36 36 30 39 30 61 33 35 2d 31 31 62 61 2d 34 31 36 36 2d 39 30 33 35 2d 36 38 31 61 31 37 36 62 64 32 39 65 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"66090a35-11ba-4166-9035-681a176bd29e","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.9	49905	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	3056	OUT	GET /trinity.json?key_maker=%7B%22181d2778a224e92c%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=24578392-b58e-46e4-a691-326525b06b4f&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fd12b1fa-734d-470a-a46d-6675c5397d83%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20Apple [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; HAPLB8G=s85190\|Zkxnn; __uis=054b4136-01f6-45be-b12f-751883821122
2024-05-21 09:21:33 UTC	760	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:33 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:32 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxno; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:33 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 38 31 64 32 37 37 38 61 32 32 34 65 39 32 63 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"181d2778a224e92c":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.9	49913	35.186.253.211	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:33 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.9	49924	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1305	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1209 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	1209	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 39 37 30 2c 22 62 69 64 49 64 22 3a 22 32 32 38 34 38 32 37 62 36 66 32 35 30 35 65 38 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 62 69 61 63 64 73 69 64 2d 66 32 69 63 2d 6a 69 74 62 2d 6b 6d 69 6c 2d 69 63 74 6f 61 6d 74 74 74 68 74 63 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 32 35 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291970,"bidId":"2284827b6f2505e8","referrer":null,"adUnitCode":"mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["300x25
2024-05-21 09:21:34 UTC	1191	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=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%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:34 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 75177 date: Tue, 21 May 2024 09:21:34 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:34 UTC	14061	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 09 93 e3 36 f6 27 f8 55 aa 6b 37 e5 f2 94 33 cd 53 87 dd ea 0e f0 80 44 49 a4 44 f0 d6 d4 84 82 97 48 8a 14 c9 24 29 91 ca 2e e7 67 df 00 a5 3c aa 6c 6f fb 3f b1 31 b1 33 d1 e5 90 84 1b 0f c0 7b bf 77 00 e9 7f 7d ac c2 fa 94 35 f5 c7 5f fe fb bf 3e fa 45 91 26 21 4e ff 8f 9f 3e ba c1 c7 5f 3e fe fd 6f f7 f7 1f c4 ce 8f dd 3c 0a 7f f9 b0 2e c3 dc fe 20 68 1b 49 f8 e5 03 cb b0 c3 c9 84 a6 d8 0f 3c c2 79 66 44 10 c4 98 18 93 0c 3b 1e d2 04 41 13 04 41 b1 04 41 10 0c 31 24 88 0f f7 f7 ff f8 7b 90 9c 3f 24 c1 f4 07 2f 74 fd 22 df d1 24 33 21 c8 1f 3e d4 cd 25 0b a7 3f 94 45 9d 34 49 91 ff e2 7a 75 91 9d 9a f0 d7 2c dc 37 bf 10 65 f7 e1 d7 a6 28 71 e2 d7 73 52 27 5e 92 25 cd e5 97 38 09 82 30 ff f5 87 7f fc 3d 39 46 1f ea ca Data Ascii: 6'Uk73SDIDH$).g<lo?13{w}5_>E&!N>_>o<. hI<yfD;AAA1${?$/t"$3!>%?E4Izu,7e(qsR'^%80=9F
2024-05-21 09:21:34 UTC	16320	IN	Data Raw: 2f 3c 11 b1 36 e6 70 2b 05 73 8e 64 62 09 fa 80 23 9d 89 aa b1 ab 59 e7 fb 36 c6 a9 be 5f a0 ae 6d 0e 61 cb 2f cc 99 8d 86 64 6e 05 b7 0c 00 10 40 95 63 f7 50 46 6a d6 4d 0c ba 58 41 32 46 aa 9e 9e ad 38 15 0d ad 99 bf 68 e1 50 c3 91 3b 07 2c 5b ac 3f 78 40 ca 6a 66 b2 2b 80 f5 b7 78 e6 72 06 a3 8d 68 f1 d1 a3 d1 22 13 50 ad 10 02 20 8b 62 a3 af e8 0e 3f b1 e1 f6 e4 96 e1 d5 00 aa 80 23 f6 ad 89 57 38 31 13 d6 36 81 e3 da 91 51 62 5c 14 68 12 ed 55 06 a8 a2 c4 ef 93 46 57 3b 63 bd 22 c5 13 80 c0 44 19 78 ec 63 6f 10 10 c6 0c a3 4d 20 00 1d bf 53 04 04 87 f7 94 5b 66 ec 58 bc 5a 1a 02 4c 59 27 cc 38 5c 0b 1c 4d 35 8d 26 04 db 85 68 62 6e 35 e7 99 6f f6 56 55 54 1b da 58 50 05 56 c5 56 d5 ac 55 0c 29 5e 88 1c 67 1e 97 59 cb 68 66 6a f2 31 f6 c2 1d c4 19 44 Data Ascii: /<6p+sdb#Y6_ma/dn@cPFjMXA2F8hP;,[?x@jf+xrh"P b?#W816Qb\hUFW;c"DxcoM S[fXZLY'8\M5&hbn5oVUTXPVVU)^gYhfj1D
2024-05-21 09:21:34 UTC	16320	IN	Data Raw: 8f 1e 66 1b 87 42 ac 6f d6 b9 32 c4 4a 98 c6 aa ac 95 97 18 75 8d bb 94 9f 3f 43 5e 77 97 c7 86 1c c5 f2 db 21 1e 6e 09 ec 61 8d 1f 90 af 0d 7f 3b 33 bf a6 5d f0 91 43 5e 6b ad ee 08 3c d7 0d f0 4f 5a 8f 03 1d a9 d2 43 bc 12 10 f8 32 a0 17 ec 02 3e 8f 90 e3 e1 19 4b dc 8d 08 a4 0a 85 16 f2 36 2c 14 79 22 9c bf 72 23 07 7c aa 55 c8 95 38 c2 3d e4 69 40 5b b7 43 7c 6f e1 b7 40 80 39 af db 39 87 a3 56 f5 83 ed 7e a4 e0 43 35 b3 8d fc 00 ec 6a 1e 43 ad 46 49 cc ca 0c f2 fa 1b 88 59 64 0f 6f 4a ba e4 ec 9e 9e 34 33 a0 71 2e 0b fa f3 63 c1 fe f8 9f e7 01 7b 07 39 30 0d 15 16 cc e9 4f cf ac 00 f0 c2 d6 6b 80 fe c8 79 1f b7 65 d2 ce 79 33 53 1e f3 c0 5f 8b 4d 0f 63 ec da 3a 1b f1 e8 0b 73 99 09 70 b9 dc 56 2f e0 33 fd f4 9c 63 31 c4 48 66 19 2c 51 88 f1 2d 38 45 Data Ascii: fBo2Ju?C^w!na;3]C^k<OZC2>K6,y"r#\|U8=i@[C\|o@99V~C5jCFIYdoJ43q.c{90Okyey3S_Mc:spV/3c1Hf,Q-8E
2024-05-21 09:21:34 UTC	16320	IN	Data Raw: 79 bc 4c 1d a3 ac 63 88 7c 26 94 aa f3 1e 19 2f c5 a3 23 4b 28 12 60 0e 03 c1 17 a5 24 b1 03 8f 35 b1 fe 74 58 d5 bb 2b d9 f5 5b 60 0d c6 39 4a 90 80 a9 a8 f6 49 74 85 fd 58 16 51 2c 07 c5 14 cb b5 66 9f 9a 98 68 6f 32 a4 dc 23 aa 3f f3 31 05 c5 a7 90 cf 7c 7e 8b ec 0e e7 a8 63 8e 6b b4 a5 b1 5e cf 60 4f d2 71 e4 a7 da f4 08 45 6a 48 c5 b4 2b 69 82 27 6b e2 6e 9d c3 11 98 b1 61 45 9d 65 93 b8 d8 c4 9c 9c cb 9c fc 2e 9b fc fa 1c 31 13 30 10 4c 2b 69 c1 97 68 fd 2e c3 66 44 71 a8 bb d5 44 61 65 52 d4 a4 cc 06 bc 22 c2 4a 18 b2 e3 4a 84 f6 91 af ce 5e fb 45 5f 2b 68 c6 40 e6 bc fc dc 3f e5 ac 01 35 5e 9c df 73 13 d1 1b 82 0b 40 71 95 ce 4e 58 fd 20 a0 f5 f4 6c e3 8f b5 7c 2f f8 98 32 09 4a 6e 0c dd 3b 82 79 b9 fd fe 5f 7b 8d 17 7d 47 f0 4f 5e 94 fd df fa 0a Data Ascii: yLc\|&/#K(`$5tX+[`9JItXQ,fho2#?1\|~ck^`OqEjH+i'knaEe.10L+ih.fDqDaeR"JJ^E_+h@?5^s@qNX l\|/2Jn;y_{}GO^
2024-05-21 09:21:34 UTC	12156	IN	Data Raw: d8 a9 75 12 fd 56 22 fb e6 a8 75 ca 54 a8 fd a6 d5 8d c3 bb 1b 34 b9 96 79 7c 92 99 0c f8 58 3a 14 89 8d c8 66 37 7a 80 47 00 7b b6 17 da 8c 8c 39 2a 07 7f 15 19 70 4e 44 35 00 7e 61 81 46 17 be f0 55 b8 b2 2a 30 e2 c4 1b 44 2b e2 30 da 77 52 3b e1 2b 95 80 00 96 dd bd b2 6f 46 92 84 ab 2d 03 33 c5 d7 e8 60 37 0d 5f f9 63 7e 5e fb c2 45 8e af c9 35 1b 65 7a 72 61 7f ea b1 38 00 a1 76 c6 09 69 18 45 2b 66 a5 83 68 04 42 e9 89 af 3b 70 96 63 6e 97 92 8f 20 70 99 ff 86 1d 51 55 67 fc 26 c1 64 87 86 16 3a 9d 19 ab 27 dc db 79 87 bb 69 64 cd e5 12 34 66 87 ed 7a d9 1a 8c d3 98 25 76 1d d6 a8 f5 dd d3 19 d7 15 1f 0e 07 5c 1e 92 f3 8d 87 3a 39 47 a3 d9 27 fa b5 b6 fb c1 ad e6 68 89 dd 7c 09 3b 50 a1 18 1e ec 99 58 22 bd ba e5 18 9d 09 bc 01 09 60 80 32 2b 89 80 Data Ascii: uV"uT4y\|X:f7zG{9pND5~aFU0D+0wR;+oF-3`7_c~^E5ezra8viE+fhB;pcn pQUg&d:'yid4fz%v\:9G'h\|;PX"`2+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.9	49920	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	663	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 5404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	5404	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:33 UTC	780	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:33 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT x-envoy-upstream-service-time: 1 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:33 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 66 32 62 65 38 64 62 39 2d 61 64 63 62 2d 34 30 36 38 2d 61 38 32 34 2d 61 65 63 61 33 66 62 36 61 38 36 35 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"f2be8db9-adcb-4068-a824-aeca3fb6a865","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.9	49921	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1196	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1322 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=4GO13tj3WhEj2HICFfD0hDNhoxBFc6OmF8PVZcAGMNfFICfCshdQUQXFAyDHdaUXt%2BdiREWEgGMVtwWVd6cSdxUkBbUGdYdF1WKyx0JQRWRhFhW3IPA3p7cXdeRQ9RNVkhWQd9fSF3BENIH3VdI1lXfHl7fwUWXQQ2XnVaA38qIHJTEF4Re0pwDAF9eiYgUBBdB2NZJloCeX4nJQNDCVd1RGdcBn9%2Fc35WQQhVYll3CwUrL3pwUERZBmZKaUgEe3tyJFZNXARmWX1eB3Aqcn9XQAsGYl1nRhB%2BeyUjU0MJUTMOclhWfHxwfldHXgZmWCRIb2RrICkTGh4RbVhpSFUsOTFkXA8XH3UbIBlBISYtZFxWXFdnXHALCnFkJ3MFRUcEZFEgR1dwcCdrVEJTUDZfJwwEcC13ZEpWCVw5BiAJRiEmLQ8CVlARYVtyDwR9fXUiAxcIC2UMcV8Ae38ldgBMSE4%3D
2024-05-21 09:21:33 UTC	1322	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 32 39 31 39 36 33 2c 22 62 69 64 49 64 22 3a 22 32 32 32 62 65 31 38 66 61 37 64 31 63 35 64 33 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 62 69 61 63 64 73 69 64 2d 66 32 69 63 2d 6a 69 74 62 2d 6b 6d 69 6c 2d 69 63 74 6f 61 6d 74 74 74 68 74 63 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283291963,"bidId":"222be18fa7d1c5d3","referrer":null,"adUnitCode":"mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"",
2024-05-21 09:21:34 UTC	1003	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_3646a4db=KKR12wTvsVboSHboTDHYGEiQWATY6EU1uLHZAQGIHVmt4Vg02RDcSRTUHC2F4AVxjQjZUX3RXCWB9UQpmTzBBR2JTDGN4U1gwFDFBEDRAQ3F9BFwxQ2ROSjUAWGQpVF9kRmMVEGJXC2dqTk1hEWdDQDMEWTd%2FVltlFGRGQmEGDDZ%2FAQt2W3ZAR2FUX2t4Vw0yQmVEEmEBCWp%2BVF9nQmVUX3RUXGF5AF9tQWNHQm5WWmsrU1ZlQzVDRmNAQ3F%2BUVgxRmZEQWdaXjYqAF4wRGFDRzRTDWRqTk1iRTITRmEBDTcuVV0wQ2FFS2dRW2Z5Ug52KnhUEDkXASdqWF94VTMSAyRAVSg1Tk0nEicFGjkMTWlqVAtkQ2EXS29PC2YrU0JjRG0TXjNaVjdlUFltFDVBETBUVzd8QEN2FDsYHTMBGzonDCYwVW5URWVVCmV9VlkwEjcUS2QGW2Z6UVkyRzJOUSs%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:36:34 GMT; Secure; SameSite=None date: Tue, 21 May 2024 09:21:34 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.9	49900	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2284 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	2284	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 39 31 38 37 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 38 33 34 39 30 30 32 34 34 39 64 32 61 63 31 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 38 32 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 48 2e 41 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 48 2e 41 23 68 65 61 Data Ascii: {"id":"1716283291877","at":1,"cur":["USD"],"imp":[{"id":"18349002449d2ac1","tagid":"1433182","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDH.A"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDH.A#hea
2024-05-21 09:21:33 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.9	49897	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	683	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=f45eddbd1c7299bf9fbebfc2482520f7
2024-05-21 09:21:34 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:33 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:34 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.9	49890	185.89.211.84	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	348	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	950	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: fa63ae73-13e2-4e33-8879-3b4d6041de68 Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:33 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.9	49927	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1538	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:preinit&_=1716283292042 HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3a693d41ba-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.9	49901	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	646	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 923 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	923	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 31 38 35 32 38 37 65 61 35 63 61 33 66 33 33 65 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 67 70 69 64 22 3a 22 2f 32 30 38 34 32 35 37 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["video","banner"],"uuid":"185287ea5ca3f33e","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"gpid":"/2084257
2024-05-21 09:21:33 UTC	977	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 140 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 92bf120d-8855-4922-9900-12f37330227c Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:33 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:33 UTC	140	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 31 38 35 32 38 37 65 61 35 63 61 33 66 33 33 65 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 38 39 30 34 37 37 33 32 35 34 37 30 35 38 34 30 32 38 32 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"185287ea5ca3f33e","tag_id":32542723,"auction_id":"8904773254705840282","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.9	49928	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1539	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:preinit&_=1716283292042 HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3a6d1f2369-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.9	49929	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1535	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:init&_=1716283292043 HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3a7a0541f9-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.9	49899	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3327 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=2_1716283291_1716283292
2024-05-21 09:21:33 UTC	3327	OUT	Data Raw: 7b 22 61 22 3a 22 39 36 63 32 38 30 31 64 2d 34 36 62 36 2d 34 63 34 32 2d 61 37 32 36 2d 66 36 32 39 34 32 38 39 32 65 34 66 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"96c2801d-46b6-4c42-a726-f62942892e4f","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:34 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=3_1716283291_1716283293; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:33 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 4 connection: close
2024-05-21 09:21:34 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4f 54 5a 6a 4d 6a 67 77 4d 57 51 74 4e 44 5a 69 4e 69 30 30 59 7a 51 79 4c 57 45 33 4d 6a 59 74 5a 6a 59 79 4f Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkOTZjMjgwMWQtNDZiNi00YzQyLWE3MjYtZjYyO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.9	49902	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1476 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	1476	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 39 31 38 38 30 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283291880,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:21:34 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json Content-Length: 84 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 4 server: istio-envoy
2024-05-21 09:21:34 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 38 36 37 39 62 66 61 35 61 62 34 30 35 31 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"18679bfa5ab4051","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.9	49930	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1536	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:init&_=1716283292043 HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3a8bdb4225-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.9	49912	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1295	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291888&to=240&aun=mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_de846181-f60c-4b86-806e-43df382fb3f3
2024-05-21 09:21:34 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:33 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:34 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 64 65 38 34 36 31 38 31 2d 66 36 30 63 2d 34 62 38 36 2d 38 30 36 65 2d 34 33 64 66 33 38 32 66 62 33 66 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 64 65 38 34 36 31 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_de846181-f60c-4b86-806e-43df382fb3f3&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_de8461

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.9	49910	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1372 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:33 UTC	1372	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 32 30 31 35 64 32 36 66 34 36 36 61 64 63 61 32 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 34 34 37 64 65 32 61 34 2d 64 64 32 31 2d 34 31 61 38 2d 39 34 32 63 2d 61 65 63 33 37 66 61 61 38 30 38 66 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 Data Ascii: {"Version":"1.0","Bids":{"2015d26f466adca2":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"447de2a4-dd21-41a8-942c-aec37faa808f","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monu
2024-05-21 09:21:34 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:33 GMT content-length: 181 x-envoy-upstream-service-time: 108 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:34 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 62 37 64 31 66 33 36 31 62 30 64 62 32 30 31 35 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 62 37 64 31 66 33 36 31 62 30 64 62 32 30 31 35 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 32 30 31 35 64 32 36 66 34 36 36 61 64 63 61 32 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"b7d1f361b0db20154bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"b7d1f361b0db20154bfb0857db316efd","BidID":"2015d26f466adca2"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.9	49916	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 2881 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=2_1716283291_1716283292
2024-05-21 09:21:33 UTC	2881	OUT	Data Raw: 7b 22 61 22 3a 22 62 66 64 31 66 31 65 33 2d 31 39 61 62 2d 34 63 62 33 2d 62 30 36 32 2d 38 64 36 32 33 62 65 32 33 61 33 64 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"bfd1f1e3-19ab-4cb3-b062-8d623be23a3d","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:34 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:32 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=3_1716283291_1716283293; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:33 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:21:34 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 59 6d 5a 6b 4d 57 59 78 5a 54 4d 74 4d 54 6c 68 59 69 30 30 59 32 49 7a 4c 57 49 77 4e 6a 49 74 4f 47 51 32 4d Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkYmZkMWYxZTMtMTlhYi00Y2IzLWIwNjItOGQ2M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.9	49931	104.22.34.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1262	OUT	GET /fpd?_=1716283292044&yv=11954&h=custommapposter.com HTTP/1.1 Host: u.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	431	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:33 GMT Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: kuid=2013b6fe90781036; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:21:33 GMT; Path=/; Domain=.kueezrtb.com; Secure; HTTPOnly; SameSite=None CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3aaeac18cc-EWR
2024-05-21 09:21:33 UTC	419	IN	Data Raw: 31 39 63 0d 0a 38 6d 47 30 65 59 57 4a 57 68 2d 44 58 52 69 44 78 73 57 54 5f 68 79 4f 58 56 57 75 57 4c 58 6c 66 71 50 53 65 70 72 52 35 4b 74 72 57 68 49 51 6b 6b 78 51 5f 59 47 68 35 4f 6b 44 66 36 47 50 41 4b 64 45 62 73 78 51 6f 51 47 6b 6e 53 79 51 5f 59 47 68 69 53 47 58 56 56 57 4a 78 59 63 51 62 61 72 6d 62 71 58 53 56 6e 72 74 57 68 30 4c 69 71 42 54 62 56 63 51 69 4b 72 53 38 56 57 4a 57 45 50 72 66 6d 4e 62 35 4f 47 46 57 51 63 51 69 4b 64 44 66 61 72 44 62 71 50 53 57 68 49 51 73 45 79 51 5f 59 47 75 35 4b 50 70 48 4d 74 55 62 61 6e 51 6f 51 57 6a 58 54 41 44 78 52 39 4b 6f 52 39 51 5f 59 47 75 69 4d 74 30 66 36 6b 45 62 56 57 4a 57 68 41 63 5f 68 65 42 78 68 78 63 57 51 63 51 65 4c 6b 70 48 71 64 44 57 68 49 51 73 4c 6b 4f 57 31 72 6c 65 4c Data Ascii: 19c8mG0eYWJWh-DXRiDxsWT_hyOXVWuWLXlfqPSeprR5KtrWhIQkkxQ_YGh5OkDf6GPAKdEbsxQoQGknSyQ_YGhiSGXVVWJxYcQbarmbqXSVnrtWh0LiqBTbVcQiKrS8VWJWEPrfmNb5OGFWQcQiKdDfarDbqPSWhIQsEyQ_YGu5KPpHMtUbanQoQWjXTADxR9KoR9Q_YGuiMt0f6kEbVWJWhAc_heBxhxcWQcQeLkpHqdDWhIQsLkOW1rleL
2024-05-21 09:21:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.9	49911	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1400 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	1400	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 33 38 61 66 30 37 63 2d 61 37 32 30 2d 34 37 32 37 2d 61 35 61 37 2d 34 63 34 30 31 38 32 36 65 36 30 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 Data Ascii: {"id":"638af07c-a720-4727-a5a7-4c401826e605","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-f
2024-05-21 09:21:33 UTC	181	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.9	49915	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	646	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:33 UTC	815	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 32 30 35 62 63 31 38 30 66 32 33 63 39 33 38 31 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 67 70 69 64 22 3a 22 2f Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"205bc180f23c9381","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"gpid":"/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.9	49918	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2449 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	2449	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 32 39 31 39 35 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 31 31 31 38 66 31 64 62 37 30 35 38 64 33 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 23 69 6e 63 6f Data Ascii: {"id":"1716283291955","at":1,"cur":["USD"],"imp":[{"id":"21118f1db7058d3","tagid":"1433179","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDL.A"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDL.A#inco
2024-05-21 09:21:34 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:21:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.9	49917	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1482 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:33 UTC	1482	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 32 39 31 39 35 34 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283291954,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:21:33 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 2 server: istio-envoy
2024-05-21 09:21:33 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 32 30 38 61 36 37 33 61 64 35 61 65 62 34 31 66 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"208a673ad5aeb41f","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.9	49922	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1300	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291958&to=240&aun=mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%23incontent-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_de846181-f60c-4b86-806e-43df382fb3f3
2024-05-21 09:21:34 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:33 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:34 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 64 65 38 34 36 31 38 31 2d 66 36 30 63 2d 34 62 38 36 2d 38 30 36 65 2d 34 33 64 66 33 38 32 66 62 33 66 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 64 65 38 34 36 31 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_de846181-f60c-4b86-806e-43df382fb3f3&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_de8461

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.9	49919	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1374 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:33 UTC	1374	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 32 31 34 64 62 62 30 37 63 34 63 64 38 61 64 35 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 65 38 63 66 65 63 33 36 2d 34 66 33 38 2d 34 66 64 65 2d 62 63 37 31 2d 31 32 63 32 62 66 34 65 32 61 38 65 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"214dbb07c4cd8ad5":{"PlacementID":"ffd2f3e5d8d521d3e956b94b85e3cf84","TransactionID":"e8cfec36-4f38-4fde-bc71-12c2bf4e2a8e","Width":300,"Height":250,"AvailableSizes":"300x250","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:21:34 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:33 GMT content-length: 181 x-envoy-upstream-service-time: 107 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:34 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 37 37 66 62 37 31 65 36 33 30 39 36 33 61 63 65 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 37 37 66 62 37 31 65 36 33 30 39 36 33 61 63 65 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 42 69 64 49 44 22 3a 22 32 31 34 64 62 62 30 37 63 34 63 64 38 61 64 35 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"77fb71e630963aceffd2f3e5d8d521d3","Placement":"ffd2f3e5d8d521d3e956b94b85e3cf84","CreativeID":"77fb71e630963aceffd2f3e5d8d521d3","BidID":"214dbb07c4cd8ad5"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.9	49932	147.182.216.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1009	OUT	GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=oAx14TayQsSWHBkxRkjL0MJMAEnOS0wGFpoMEhiUk4wRWE1eHMKG2RfWGNVTWlFNW54dlxafklcZgdMZksyb3AnCB1gXVlhA09oEmNkfndJVHBdWWMAT2FDYGYpIV1MYFxeYFlPN0tqZ3lgR1pkWF01V0hiS2BkeHVcTWpZWWdQHGhFMmFqbklOYVwLYlEaN0cwYy5wCkkwXFw3VkwzRWV1ZGBdS2UKX2xQQWASMGF8cFxMZlNcMlIcN0Bxe2p0WE8zXVsyVUgwEGVjenVfTGpdDGwEGzNRf3V%2BcVseZllYMFNOZxcxNS51U0xnCAhtWRtzX3Fhe3EIT2QOXGNVT2RCZGApIVMeNglTMVBbfVFlZCwkD0pnWV9gA04wETFneiRaTWFdX2JDJH1RMDg9LB9aaFtGdgYdIQFxbTM%2FR1ohDhknCBY%2FUWl1fCENTGcPC2ZMSzUWN3p4cg8cf10IZwRUNBdqY3kmCE1rU15gQ1VzEDw5JicIDDsEBB0FW2tRZWIqcFpJaw4MNVdKMxAxYyl1WxxnUwg2QwQ%3D
2024-05-21 09:21:33 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:21:33 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.9	49933	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1535	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdr&_=1716283292044 HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:33 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:33 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3afdff0f3b-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.9	49891	34.251.30.134	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	360	OUT	GET /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	512	IN	HTTP/1.1 400 Bad Request Date: Tue, 21 May 2024 09:21:33 GMT Content-Type: application/json Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: hb.minutemedia-prebid.com x-reason: failed to unmarshal payload x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.9	49934	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1536	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdr&_=1716283292044 HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3b3ff2425c-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.9	49894	54.76.86.242	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1023	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290788&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_cabbca77-add4-4919-8833-9161c9af2954
2024-05-21 09:21:34 UTC	454	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:34 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:34 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:34 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 63 61 62 62 63 61 37 37 2d 61 64 64 34 2d 34 39 31 39 2d 38 38 33 33 2d 39 31 36 31 63 39 61 66 32 39 35 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 63 61 62 62 63 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_cabbca77-add4-4919-8833-9161c9af2954&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_cabbca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.9	49895	54.76.86.242	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	1023	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283290870&to=240&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_de846181-f60c-4b86-806e-43df382fb3f3
2024-05-21 09:21:34 UTC	454	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:34 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:34 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:34 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 64 65 38 34 36 31 38 31 2d 66 36 30 63 2d 34 62 38 36 2d 38 30 36 65 2d 34 33 64 66 33 38 32 66 62 33 66 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 64 65 38 34 36 31 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_de846181-f60c-4b86-806e-43df382fb3f3&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_de8461

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.9	49938	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	2757	OUT	GET /trinity.json?key_maker=%7B%22131160d90f6a1f9e%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=3ba70010-bc4c-455f-9e7b-ada9bdb499f7&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22555ed8b2-faf8-4994-aca8-4b165973dbae%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20 [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxno
2024-05-21 09:21:34 UTC	664	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:34 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:33 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close
2024-05-21 09:21:34 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 33 31 31 36 30 64 39 30 66 36 61 31 66 39 65 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"131160d90f6a1f9e":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.9	49937	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:33 UTC	2792	OUT	GET /trinity.json?key_maker=%7B%2216716bff893cdd02%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=5f8c3e71-98dd-4042-8e46-0425cc913dd0&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fbe6b6ea-d48e-4ade-aa54-7827a1dd0cee%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20 [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxno
2024-05-21 09:21:34 UTC	664	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:34 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:33 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close
2024-05-21 09:21:34 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 36 37 31 36 62 66 66 38 39 33 63 64 64 30 32 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"16716bff893cdd02":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.9	49936	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	547	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://custommapposter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:34 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A5ceJmDZ0tGxYCl1cbSpmIpDR%2FNhkNIPuw3EEUVre3XpaAkaDFa2uyPra8VdLtRgX8YUddjJU8MzhgGbh0pKSS%2F%2FR6KUknCdkCBijl70lY%2By4KbG3WR0lRT0GN4L5rXkmfM29fuyXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f3c2ffcc341-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.9	49939	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	547	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://custommapposter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	718	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:34 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d3MErD6k7oycyfxVIY%2FuTOkKX7BJzAAuaApxqdY8saeScM%2FvAqFzlVbmCDK7QwGB1JdrfGQMlgL2q026RvPSAhI9tFdqF3DJEFtNDye7D0fONVIODt%2FErpOfmaQywtAasA4uwdpHLQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f3d39d75e7a-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.9	49941	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	699	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180386 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:34 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.9	49942	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	364	OUT	GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	296	IN	HTTP/1.1 204 No Content content-length: 0 date: Tue, 21 May 2024 09:21:34 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.9	49940	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	699	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180390 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:34 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.9	49945	35.186.253.211	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:34 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.9	49958	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1567	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292526&bidder=kueezrtb&at=display HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3ecd1041ff-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.9	49956	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1566	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292526&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3ec9ab6a5f-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.9	49943	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=2_1716283291_1716283292
2024-05-21 09:21:34 UTC	265	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:21:33 GMT server: envoy vary: accept-encoding x-envoy-upstream-service-time: 0 connection: close
2024-05-21 09:21:34 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.9	49960	147.182.216.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1044	OUT	GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=fOa15ycOGf2rnotocx0CAkE%2FJhRGHAsdB01ZIxJ1SlQucVRQQl8OF1lXSgd3TVt5IV8CRllNWE1VSlZ2Tlsuf15XEQtdQlxWGgZ6GFN8cVMQXkxZR1gCTgBzSlIuJFAGQFlbQFdVHgh6SVJta0QEQVkOQQkBGwNwSVR4cl4AQV1eEVZVQAZhVUF5dFFTRF4MElsATFZxGFItcFBRRVsNQllBVBJ1SlQucl4DSl8OF1lXSgd3TVt5IVVXFF1NWE1VSwciT1Ipc1dTEVhbRlhXTAh1H1sqJQQQXkxZR18FTAJxHVF4cQJQEAhYTFtWG1J6QQFta0QEQQoJEF1WSgV3G1QuJQQCQAheQVxVTQZhVUF5dFFTRF9cTFxQSAd0TFt9dFUDF1dZFVlBVBJ1SlAscFBXRFlbQlpSTwciGlspIwQLF19NKUNBG182FxdtfVYeUAkLBB1BQks%2BVUE8IhVBGwEBVlVBTFMlTVYrJlQfQAoKEEJTSFQnVFUtdAMfFwpWQF4HGwV6QVd7ZUoQEQEBGgoADFksFyorZVwQRFsNRl5SQVUlGFV8JQVQRg9YRAtWQFIhWx4%3D
2024-05-21 09:21:34 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:21:34 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.9	49949	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1566	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292527&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3ecd8a4244-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.9	49955	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1567	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292527&bidder=kueezrtb&at=display HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3ece248c65-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.9	49959	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1589	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292557&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; vdzj1_e8c24d42=8MB14K6svL4lKgcZkHOMBQDFz5AAi4VEHhRE219BUQXegYOe1YCOV18fXwCR056UlV7U1R4R2p5eVBGQXRVVHMCAD9Zfnx%2BVEVPLQRffVJBdkl%2BfHxXRUZ8B10qBFVuWX97fw5FEHQNXHpFT3hde3gvBkJCew0PeFFRaFp%2FLCpVEk58VVtpS0FsWH8ufQdATn8HXHxQVmJZe3x6U0pALQJOZ0VVaVwpeXtVFUIvAAp5BlI4XH4sfAMRQHoWQGlRUG0KfXd6DkIXLwJYeVBXblN%2BKXhTFUVuGE59VFQ7XXkpfwcSFXoAXnxTV2JdLncuVBFUYBZaeFcFbll6K3kBRRIuVgp8X1dvCCp2c1RRWm4CX3gEVGwOfnh%2FAEZHewMNKF8FPglxKnoUX1R6BwgtA1FvWX17KQESFC4EXi1WVmldfXlpa19UL1sZJRNBYFtkbSxSAwRuDhc2S0EpDjs8IlkdVHYWWCgBV28PKX1mBBcTKBlcewMHd10qfC4bFhJ1AF0vBFZjU3x7aRpRFSNaAi4EFzMEJgYvFElUegEOeVZSYw4uLn0FERUuAA18VwdvUyotaUs%3D; kuid=2013b6fe90781036
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3ecf7f5e72-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.9	49963	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	672	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180390 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:34 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.9	49964	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	672	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7bde16b5-414f-4c99-b45a-259240a801e0 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180390 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:34 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.9	49966	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1657	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292557&bidder=kueezrtb&at=display HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wUc15n5z5WCuUua35IyYFRcKVCU3GzAHEhEPEltvXQIbA2UhRWQUAgUBe05tWg1MU25zQWJXTREDex9sWQ0bDW8mFjBHVwAAK09gDwVJA2JhWXdDUgRUf0lpXQQbVmF3R2JBVQsDL0FgXgRYGXV1RmIRUQIBfkA6XQNIB2Z0FjQWAAsFKE57QhdMBmAiQ2RGWQAGeU5uWw1IBmRyEGxDAAUXZVtvXQIbA2cgE2EWVVUHKEg7WQMZAmIhQ2NXTREDek44Ww1LDWYiFmNBUwQBfUFvCAYfU2RhWXdDUgRUf0g%2FWgQbVmF3R2JBVQsDL0E8DFdYGXV1RmUTVQEHLUtuWFEYVzF0TWFAAlEMcRt7QhdMBmAiQ2dNBAJUKk9tXAJOAW91E2xFVQEXZVtvXQIbADEhFmZGUQQCfEFrXQZLUG51TWNXTREDeh0%2FCgdPB2J3F2IUA1EFex9oWwZMAGFhWXdDUgBWfk88WAJOA2JyQmIUAgtTLRtgCwRYaHthFjoAD0cXc0l1TFIeRSVhTy4ITRFGLAoqB1oUF21hQTYTVQZRKEt0XFEfUXpzRTERTAVXehx0C1FDAWYnFmBMWQcBa1V7DVoUWzIgATwaD3pRa0N7WAAYB2ZyTDATAAUGKxo7WlRNBTN2TTcXQ04%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3fffa2436f-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.9	49944	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	878	OUT	GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1&cbuster=1716283293&pubUrlAuto=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&videoType=flow&floatWidth=&floatHeight=&floatDirection=&floatVerticalOffset=&floatHorizontalOffset=&floatCloseBtn=&flowMode=&flowCloseButtonPosition= HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:21:34 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Tue, 21 May 2024 09:21:34 GMT set-cookie: csuuid=664c679d515d1; expires=Sat, 15-Jun-2024 09:21:34 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-origin: * cache-control: no-store pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 39e6266db143f6443f194d8c60e22480.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SPfovTE8VAzx_x5DU_ue3dZd9__uueO48p0_7Xwb9DcmvNmenilUog== Age: 0
2024-05-21 09:21:34 UTC	5465	IN	Data Raw: 31 35 35 31 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 73 41 72 72 61 79 20 3d 20 27 20 20 68 74 74 70 73 3a 2f 2f 6c 69 76 65 2e 70 72 69 6d 69 73 2e 74 65 63 68 2f 6d 61 69 6e 2f 6a 73 2f 64 65 66 6c 61 74 65 2e 6d 69 6e 2e 6a 73 20 20 68 74 74 70 73 3a 2f 2f 6c 69 76 65 2e 70 72 69 6d 69 73 2e 74 65 63 68 2f 63 6f 6e 74 65 6e 74 2f 6f 6d 69 64 2f 73 74 61 74 69 63 2f 6f 6d 77 65 62 2d 76 31 2e 6d 69 6e 2e 6a 73 20 20 68 74 74 70 73 3a 2f 2f 6c 69 76 65 2e 70 72 69 6d 69 73 2e 74 65 63 68 2f 63 6f 6e 74 65 6e 74 Data Ascii: 1551 try { var linksArray = ' https://live.primis.tech/main/js/deflate.min.js https://live.primis.tech/content/omid/static/omweb-v1.min.js https://live.primis.tech/content
2024-05-21 09:21:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.9	49962	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	679	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180386 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:34 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.9	49946	108.138.6.136	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	584	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	724	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Tue, 21 May 2024 09:19:48 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 61c90c70feca5f532bf48bc0dc85d516.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: Ux85sI6zniYriB-95wMoxxHO2Ph3phOeWBQ2itx3x4kC3MwJz4tW1Q== Age: 107
2024-05-21 09:21:34 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.9	49957	185.89.211.84	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	348	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	950	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 90866aaf-e4bc-4e7c-a36a-0f1616fc37ac Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:34 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:34 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.9	49967	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1631	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779 HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wUc15n5z5WCuUua35IyYFRcKVCU3GzAHEhEPEltvXQIbA2UhRWQUAgUBe05tWg1MU25zQWJXTREDex9sWQ0bDW8mFjBHVwAAK09gDwVJA2JhWXdDUgRUf0lpXQQbVmF3R2JBVQsDL0FgXgRYGXV1RmIRUQIBfkA6XQNIB2Z0FjQWAAsFKE57QhdMBmAiQ2RGWQAGeU5uWw1IBmRyEGxDAAUXZVtvXQIbA2cgE2EWVVUHKEg7WQMZAmIhQ2NXTREDek44Ww1LDWYiFmNBUwQBfUFvCAYfU2RhWXdDUgRUf0g%2FWgQbVmF3R2JBVQsDL0E8DFdYGXV1RmUTVQEHLUtuWFEYVzF0TWFAAlEMcRt7QhdMBmAiQ2dNBAJUKk9tXAJOAW91E2xFVQEXZVtvXQIbADEhFmZGUQQCfEFrXQZLUG51TWNXTREDeh0%2FCgdPB2J3F2IUA1EFex9oWwZMAGFhWXdDUgBWfk88WAJOA2JyQmIUAgtTLRtgCwRYaHthFjoAD0cXc0l1TFIeRSVhTy4ITRFGLAoqB1oUF21hQTYTVQZRKEt0XFEfUXpzRTERTAVXehx0C1FDAWYnFmBMWQcBa1V7DVoUWzIgATwaD3pRa0N7WAAYB2ZyTDATAAUGKxo7WlRNBTN2TTcXQ04%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f3ffc88436d-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.9	49965	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	672	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7660f095-8567-4e13-b266-ede79c1f7a19 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:34 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180386 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:34 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.9	49947	108.138.6.136	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	659	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fcustommapposter.com&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	509	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 1183 Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Tue, 21 May 2024 09:19:47 GMT Server: Server X-Cache: Hit from cloudfront Via: 1.1 c0c6d7afa25d841027d75444425d2010.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: srilpLPJoayw8hUS9gsL4Oi8AE2498M-UrHKATa-JFd7DyZz0LVe8w== Age: 107
2024-05-21 09:21:35 UTC	1183	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 76 61 72 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 20 3d 20 27 41 41 58 38 52 4e 36 36 31 27 3b 5c 6e 69 66 20 28 21 77 69 6e 64 6f 77 2e 5f 5f 62 74 5f 61 6c 72 65 61 64 79 5f 69 6e 76 6f 6b 65 64 20 26 26 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 20 26 26 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 2e 63 68 61 72 41 74 28 30 29 20 21 3d 3d 20 27 25 27 29 20 7b 5c 6e 20 20 63 72 65 61 74 65 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 62 74 6c 6f 61 64 65 72 2e 63 6f 6d 2f 74 61 67 3f 61 61 78 5f 69 64 3d 27 2b 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 20 2b 20 27 26 75 70 61 70 69 3d 74 72 75 65 27 29 3b 5c Data Ascii: {"3pvendor":"var blockthroughPropertyId = 'AAX8RN661';\nif (!window.__bt_already_invoked && blockthroughPropertyId && blockthroughPropertyId.charAt(0) !== '%') {\n createScript('https://btloader.com/tag?aax_id='+ blockthroughPropertyId + '&upapi=true');\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.9	49969	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1556	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:fpdrd&_=1716283292779 HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:34 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:34 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f400cadc40e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.9	49948	18.244.15.236	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1086	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=0&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Tue, 21 May 2024 09:21:34 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 e4f83d72be7853fbcceb590827a5b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: fK8HAFcoJIF30NkD17ElGt5pu5JNO_g9FXN17-KG1x29lLF9E-2IHg==
2024-05-21 09:21:35 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.9	49951	18.244.15.236	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1119	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=1&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Tue, 21 May 2024 09:21:34 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 93f1c701362eb59a676baaac7ea81bd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: IZje4sFUuaG5kWlExK9_dx5zb0faR1kyyr8FaCqBUXSf85J5VcG2cA==
2024-05-21 09:21:35 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.9	49952	18.244.15.236	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1087	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Tue, 21 May 2024 09:21:34 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 6571e9f709b2287f8a30275c17d07140.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: fv1EnO4EQZPF3Cfap_MmmVcSZOS1nOdP_oHE195D7wy_2aulbcHFKw==
2024-05-21 09:21:35 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 32 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.9	49950	18.244.15.236	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1087	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Tue, 21 May 2024 09:21:34 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 5034084c037ff19008ba7c2c0b849a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: k4CjXJOpFTPblgPe5uCvTK9f2l3QxM2nXnjarHSYhmv8Efc5IUKexQ==
2024-05-21 09:21:35 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 33 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.9	49954	18.244.15.236	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1086	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Tue, 21 May 2024 09:21:35 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 11c65b00bf7f76c861a15dcad5558b9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: O-w-9wz7QuMgH5p2S2huYiAO5ZKMxP3Q3ve8SqSGalr7B-HDgSSnuQ==
2024-05-21 09:21:35 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 34 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.9	49953	18.244.15.236	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	1087	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Tue, 21 May 2024 09:21:34 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 888b6b44a57f755881c4b0f069225010.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: iJQWyRd5J7Ed0sWvwzsCi0jSdZiNeUuTVaJB6M1ygasej4nD2cScww==
2024-05-21 09:21:35 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 35 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.9	49961	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	683	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:35 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:34 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:35 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.9	49968	34.251.30.134	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:34 UTC	360	OUT	GET /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	512	IN	HTTP/1.1 400 Bad Request Date: Tue, 21 May 2024 09:21:35 GMT Content-Type: application/json Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: hb.minutemedia-prebid.com x-reason: failed to unmarshal payload x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.9	49971	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	721	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=i.r&u=KJI01M&d=%7B%22auPath%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDW.A%22%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180391 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.9	49974	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	672	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180391 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.9	49976	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	1587	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292952&bidder=kueezrtb&at=display HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:35 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:35 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f4588070f88-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.9	49977	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	1586	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292952&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:35 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:35 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f45896a0f79-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.9	49973	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	364	OUT	GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	296	IN	HTTP/1.1 204 No Content content-length: 0 date: Tue, 21 May 2024 09:21:35 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.9	49978	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	1587	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292953&bidder=kueezrtb&at=display HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:35 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:35 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f4588ad4406-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.9	49979	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	1586	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283292953&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:35 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:35 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f45882ec425-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.9	49975	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	1586	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:bto&_=1716283293054&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=Tgn15DZrGHhOd6MWz22uP3gCJjocIQFEPnVAaRBDd20TcXoKf1VXLmFOAAVBcGJEIXFYe1MUYXVMAFRAc2ITf3ANLAEEe2RPUARMJWpBcX1KY0YAfmAbBAJFd2sTJH5cfVMCeW9MVApMdGtQa2pefFNXe2ZJCgFGdG1FcnBafFcHKG5MUwRXaHhEdH8JeVRVK2MZBlRHJWsQcH4LeFFUe2FYHhBDd20TcnBZd1VXLmFOAAVBcGJEIXsNKVcUYXVMAQUUcmsUc3kJLFICf2BOBgpDImIXJSpKY0YAfmccBgBHIGhFcSwKLQIBdWNPUVBMfDhQa2pefFNXeDEYUQFGdG1FcnBafFcHKG5MCgRXaHhEdCwOK1YDf2JOUAUUJjhCdS5ZelcAeGFYHhBDd2kRcH4NeVMCe2JLBQUUJ2IUIypRKlUUEHtYUV0AKi5QfXhEbQNSPSVYCEkIaHgBIjsbJgtYb21YBlETcG8WJnpFfQBTKXpKAlYRaWwQdC1FKgAPeWYeUQdMfG5GZWRKLAtYIzIZRlsaKhMWZXJKeVFUf2ZLC1cTJWxBJSsKewUBfTNPClAXZic%3D
2024-05-21 09:21:35 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:35 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f458fb917a9-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.9	49972	35.186.253.211	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:21:35 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.9	49983	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	672	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180391 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.9	49980	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	672	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=c992f38f-79ee-483b-a206-98cc8db521aa HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180387 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.9	49985	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	1587	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:bto&_=1716283293054&bidder=kueezrtb&at=display HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:35 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:35 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f458cdfc330-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.9	49982	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	699	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=7bde16b5-414f-4c99-b45a-259240a801e0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180391 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.9	49981	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	706	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:35 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180387 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.9	49984	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:35 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=2_1716283291_1716283292
2024-05-21 09:21:35 UTC	265	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:21:35 GMT server: envoy vary: accept-encoding x-envoy-upstream-service-time: 0 connection: close
2024-05-21 09:21:35 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.9	49986	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:36 UTC	1586	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283293107&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:36 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:36 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f488a96425d-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.9	49987	104.22.35.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:36 UTC	1587	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283293110&bidder=kueezrtb&at=display HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:36 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:36 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f48bf605e6a-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.9	49970	172.217.16.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:36 UTC	645	OUT	GET /i/20842576?ers=3 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:36 UTC	1957	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 21 May 2024 09:21:36 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-74iZAuFHnBXgLYMzThllfQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjytDikmII0pBiOO90h-k6EBtoPGeyAGKJry-ZtIA45vl01hQgdkqfwRoCxD71M1jjgLj15jnW6UCc9O88awkQ71x8gfUgEK86coF1ExC3f77AOhOIv7NfZP0PxEI8HAvOb9zEJtDx4kknk5JGUn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUbyRgZGJgamhpZ6BeXyBAQCZRkOb" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 37 32 61 33 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 72a3if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d Data Ascii: his))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.q=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)}
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 43 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 43 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 55 28 29 3b 74 68 69 73 2e 46 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 55 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 4a 28 29 29 7b 76 61 72 20 68 3d 5f 2e 65 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 68 Data Ascii: function(g){this.C(1,g)};e.prototype.C=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`"+this.g);this.g=g;this.j=h;2===this.g&&this.U();this.F()};e.prototype.U=function(){var g=this;d(function(){if(g.J()){var h=_.ea.console;"undefined"!==typeof h&&h
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 70 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 67 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 29 3b 0a 76 61 72 20 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 Data Ascii: ring.prototype.startsWith",function(a){return a?a:function(b,c){var d=pa(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var g=0;g<f&&c<e;)if(d[c++]!=b[g++])return!1;return g>=f}});var qa=function(a,b){return Object.pr
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 71 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 22 73 22 21 3d 6e 2e 76 61 6c 75 65 5b 31 5d 29 72 65 74 75 72 6e 21 31 3b 6e 3d 6c 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 2e 64 6f 6e 65 7c 7c 34 21 3d 6e 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 22 74 22 Data Ascii: h=Object.seal({x:4}),k=new a(_.q([[h,"s"]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next();if(n.done\|\|n.value[0]!=h\|\|"s"!=n.value[1])return!1;n=l.next();return n.done\|\|4!=n.value[0].x\|\|"t"
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 6d 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 26 26 2d 49 6e 66 69 6e 69 74 79 21 3d 3d 62 7d 7d Data Ascii: f=function(){var h={};return h.ma=h.next=h.head=h},g=0;return c});p("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991});p("Number.isFinite",function(a){return a?a:function(b){return"number"!==typeof b?!1:!isNaN(b)&&Infinity!==b&&-Infinity!==b}}
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 0a 70 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 66 75 6e 63 74 69 Data Ascii: d"!=typeof Symbol&&Symbol.iterator&&b[Symbol.iterator];if("function"==typeof f){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Array.prototype.fill",functi
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 71 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 70 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 65 61 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 70 61 28 74 68 69 73 2c 6e 75 6c 6c 2c 22 72 65 70 65 61 74 22 29 3b 69 66 28 30 3e 62 7c 7c 31 33 34 32 31 37 37 32 37 39 3c 62 29 74 68 Data Ascii: ll(d,f,f,e)})};return b});p("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)qa(b,d)&&c.push([d,b[d]]);return c}});p("String.prototype.repeat",function(a){return a?a:function(b){var c=pa(this,null,"repeat");if(0>b\|\|1342177279<b)th
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 29 3f 53 79 6d 62 6f 6c 28 29 3a 61 7d 3b 5f 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 3f 61 7c 62 3a 61 26 7e 62 7d 3b 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 30 2c 5f 2e 4f 61 29 28 62 2c 28 61 7c 30 29 26 2d 31 34 35 39 31 29 7d 3b 52 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 30 2c 5f 2e 4f 61 29 28 62 2c 28 61 7c 33 34 29 26 2d 31 34 35 35 37 29 7d 3b 53 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 3e 3e 31 34 26 31 30 32 33 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 35 33 36 38 37 30 39 31 32 3a 61 7d 3b 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c Data Ascii: ypeof Symbol()?Symbol():a};_.Na=function(a,b,c){return c?a\|b:a&~b};Pa=function(a,b){(0,_.Oa)(b,(a\|0)&-14591)};Ra=function(a,b){(0,_.Oa)(b,(a\|34)&-14557)};Sa=function(a){a=a>>14&1023;return 0===a?536870912:a};Ua=function(a){return!(!a\|\|"object"!==typeof a\|
2024-05-21 09:21:36 UTC	1957	IN	Data Raw: 26 31 30 32 33 29 3c 3c 31 34 3b 62 72 65 61 6b 20 61 7d 7d 69 66 28 62 29 7b 62 3d 4d 61 74 68 2e 6d 61 78 28 62 2c 65 2d 28 2b 21 21 28 64 26 35 31 32 29 2d 31 29 29 3b 69 66 28 31 30 32 34 3c 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 78 22 29 3b 64 3d 64 26 2d 31 36 37 36 30 38 33 33 7c 28 62 26 31 30 32 33 29 3c 3c 31 34 7d 7d 7d 28 30 2c 5f 2e 4f 61 29 28 61 2c 0a 64 29 3b 72 65 74 75 72 6e 20 61 7d 3b 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 62 28 62 29 7d 3b 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f Data Ascii: &1023)<<14;break a}}if(b){b=Math.max(b,e-(+!!(d&512)-1));if(1024<b)throw Error("x");d=d&-16760833\|(b&1023)<<14}}}(0,_.Oa)(a,d);return a};sb=function(a,b){return rb(b)};rb=function(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "boo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.9	49997	104.16.183.87	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:36 UTC	999	OUT	GET /cs.html?pt=5261-2296-01&pc=US HTTP/1.1 Host: cs.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
2024-05-21 09:21:36 UTC	780	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=86400 Expires: Wed, 22 May 2024 09:21:36 GMT Last-Modified: Mon, 13 May 2024 15:47:22 GMT ETag: W/"703f6441752719f0b48240dbe150bc80" Vary: Accept-Encoding x-goog-generation: 1715615242479232 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 15731 x-goog-hash: crc32c=+gOJ6g== x-goog-hash: md5=cD9kQXUnGfC0gkDb4VC8gA== x-goog-storage-class: REGIONAL X-GUploader-UploadID: ABPtcPqZu1BZs1hiqV3OIv1m8ECq1w0lwrLK2oPx13kwskO6NP_JtmcQvBUQfk632iyO5PAkJ0LOqJ5YEA CF-Cache-Status: HIT Age: 279 Server: cloudflare CF-RAY: 88737f4b59714201-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:36 UTC	589	IN	Data Raw: 37 63 61 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 76 61 72 20 65 2c 74 2c 73 2c 6e 2c 72 2c 69 2c 6f 2c 61 2c 64 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 7b 7d 2c 63 3d 7b 7d 2c 75 3d 7b 7d 2c 6c 3d 64 2e 70 61 72 63 65 6c 52 Data Ascii: 7ca7<!DOCTYPE html><html><head></head><body> <script type="module">var e,t,s,n,r,i,o,a,d="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},c={},u={},l=d.parcelR
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 6e 3d 74 2c 72 3d 65 26 26 65 2e 65 78 70 6f 72 74 73 3d 3d 6e 26 26 65 2c 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 64 3b 69 2e 67 6c 6f 62 61 6c 21 3d 3d 69 26 26 69 2e 77 69 6e 64 6f 77 21 3d 3d 69 7c 7c 28 73 3d 69 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 7d 3b 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 45 72 72 6f 72 29 2e 6e 61 6d 65 3d 22 49 6e 76 61 6c 69 64 43 68 61 72 61 63 74 65 72 45 72 72 6f 72 22 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 6f 28 65 29 7d 2c 63 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: function(e,t){!function(s){var n=t,r=e&&e.exports==n&&e,i="object"==typeof d&&d;i.global!==i&&i.window!==i\|\|(s=i);var o=function(e){this.message=e};(o.prototype=new Error).name="InvalidCharacterError";var a=function(e){throw new o(e)},c="ABCDEFGHIJKLMNOPQ
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 20 70 20 69 6e 20 6c 29 6c 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 70 29 26 26 28 6e 5b 70 5d 3d 6c 5b 70 5d 29 3b 65 6c 73 65 20 73 2e 62 61 73 65 36 34 3d 6c 7d 28 74 68 69 73 29 7d 29 29 3b 63 6c 61 73 73 20 70 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 63 6c 61 73 73 20 68 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 45 6e 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 63 6c 61 73 73 20 67 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 Data Ascii: p in l)l.hasOwnProperty(p)&&(n[p]=l[p]);else s.base64=l}(this)}));class p extends Error{constructor(e){super(e),this.name="DecodingError"}}class h extends Error{constructor(e){super(e),this.name="EncodingError"}}class g extends Error{constructor(e){super
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2d 5f 5d 2b 24 2f 2e 74 65 73 74 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 70 28 22 49 6e 76 61 6c 69 64 6c 79 20 65 6e 63 6f 64 65 64 20 42 61 73 65 36 34 55 52 4c 20 73 74 72 69 6e 67 22 29 3b 6c 65 74 20 74 3d 22 22 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 52 45 56 45 52 53 45 5f 44 49 43 54 2e 67 65 74 28 65 5b 73 5d 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 3b 74 2b 3d 22 30 22 2e 72 65 70 65 61 74 28 74 68 69 73 2e 42 41 53 49 53 2d 6e 2e 6c 65 6e 67 74 68 29 2b 6e 7d 72 65 74 75 72 6e 20 74 7d 7d 63 6c 61 73 73 20 76 7b 63 6c 6f 6e 65 28 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 Data Ascii: [A-Za-z0-9\-_]+$/.test(e))throw new p("Invalidly encoded Base64URL string");let t="";for(let s=0;s<e.length;s++){const n=this.REVERSE_DICT.get(e[s]).toString(2);t+="0".repeat(this.BASIS-n.length)+n}return t}}class v{clone(){const e=new this.constructor;re
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 69 67 68 74 3a 65 3c 73 2e 76 61 6c 75 65 26 26 28 73 3d 73 2e 6c 65 66 74 29 7d 72 65 74 75 72 6e 20 74 7d 6d 69 6e 28 65 3d 74 68 69 73 2e 72 6f 6f 74 29 7b 6c 65 74 20 74 3b 66 6f 72 28 3b 65 3b 29 65 2e 6c 65 66 74 3f 65 3d 65 2e 6c 65 66 74 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 65 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 7d 6d 61 78 28 65 3d 74 68 69 73 2e 72 6f 6f 74 29 7b 6c 65 74 20 74 3b 66 6f 72 28 3b 65 3b 29 65 2e 72 69 67 68 74 3f 65 3d 65 2e 72 69 67 68 74 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 65 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 7d 72 65 6d 6f 76 65 28 65 2c 74 3d 74 68 69 73 2e 72 6f 6f 74 29 7b 6c 65 74 20 73 3d 6e 75 6c 6c 2c 6e 3d 22 6c 65 66 74 22 3b 66 6f 72 28 3b 74 3b 29 69 66 28 65 3c 74 2e 76 61 6c 75 65 29 73 3d 74 2c Data Ascii: ight:e<s.value&&(s=s.left)}return t}min(e=this.root){let t;for(;e;)e.left?e=e.left:(t=e.value,e=null);return t}max(e=this.root){let t;for(;e;)e.right?e=e.right:(t=e.value,e=null);return t}remove(e,t=this.root){let s=null,n="left";for(;t;)if(e<t.value)s=t,
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 3d 22 70 75 62 6c 69 73 68 65 72 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 22 3b 73 74 61 74 69 63 20 70 75 62 6c 69 73 68 65 72 43 6f 6e 73 65 6e 74 73 3d 22 70 75 62 6c 69 73 68 65 72 43 6f 6e 73 65 6e 74 73 22 3b 73 74 61 74 69 63 20 70 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 3d 22 70 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 22 3b 73 74 61 74 69 63 20 70 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 73 3d 22 70 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 73 22 3b 73 74 61 74 69 63 20 70 75 72 70 6f 73 65 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 3d 22 70 75 72 70 6f 73 65 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 22 3b 73 74 61 Data Ascii: egitimateInterests="publisherLegitimateInterests";static publisherConsents="publisherConsents";static publisherRestrictions="publisherRestrictions";static purposeConsents="purposeConsents";static purposeLegitimateInterests="purposeLegitimateInterests";sta
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 65 72 28 74 68 69 73 2e 70 75 72 70 6f 73 65 49 64 29 26 26 74 68 69 73 2e 70 75 72 70 6f 73 65 49 64 3e 30 26 26 28 74 68 69 73 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 3d 3d 3d 65 2e 4e 4f 54 5f 41 4c 4c 4f 57 45 44 7c 7c 74 68 69 73 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 3d 3d 3d 65 2e 52 45 51 55 49 52 45 5f 43 4f 4e 53 45 4e 54 7c 7c 74 68 69 73 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 3d 3d 3d 65 2e 52 45 51 55 49 52 45 5f 4c 49 29 7d 69 73 53 61 6d 65 41 73 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 72 70 6f 73 65 49 64 3d 3d 3d 65 2e 70 75 72 70 6f 73 65 49 64 26 26 74 68 69 73 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 3d 3d 3d 65 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 7d 7d 63 6c 61 73 73 20 45 20 Data Ascii: er(this.purposeId)&&this.purposeId>0&&(this.restrictionType===e.NOT_ALLOWED\|\|this.restrictionType===e.REQUIRE_CONSENT\|\|this.restrictionType===e.REQUIRE_LI)}isSameAs(e){return this.purposeId===e.purposeId&&this.restrictionType===e.restrictionType}}class E
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 30 3d 3d 3d 73 7c 7c 73 3e 65 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 29 26 26 28 73 3d 65 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 29 7d 29 29 2c 73 7d 76 65 6e 64 6f 72 48 61 73 52 65 73 74 72 69 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 73 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 67 65 74 52 65 73 74 72 69 63 74 69 6f 6e 73 28 65 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 26 26 21 73 3b 65 2b 2b 29 73 3d 74 2e 69 73 53 61 6d 65 41 73 28 6e 5b 65 5d 29 3b 72 65 74 75 72 6e 20 73 7d 67 65 74 4d 61 78 56 65 6e 64 6f 72 49 64 28 29 7b 6c 65 74 20 65 3d 30 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 65 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 6d 61 78 28 29 2c Data Ascii: 0===s\|\|s>e.restrictionType)&&(s=e.restrictionType)})),s}vendorHasRestriction(e,t){let s=!1;const n=this.getRestrictions(e);for(let e=0;e<n.length&&!s;e++)s=t.isSameAs(n[e]);return s}getMaxVendorId(){let e=0;return this.map.forEach((t=>{e=Math.max(t.max(),
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 61 73 28 65 29 5d 7d 76 61 6c 75 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 5f 2e 76 61 6c 75 65 73 28 29 7d 67 65 74 20 6d 61 78 49 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 78 49 64 5f 7d 68 61 73 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 5f 2e 68 61 73 28 65 29 7d 75 6e 73 65 74 28 65 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 74 68 69 73 2e 75 6e 73 65 74 28 65 29 29 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 68 69 73 2e 75 6e 73 65 74 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6d 61 70 28 28 65 3d 3e 4e 75 6d 62 65 72 28 65 29 29 29 29 3a 28 74 68 69 73 2e 73 65 74 5f 2e 64 65 6c 65 74 65 28 4e 75 6d 62 65 72 28 65 29 29 2c Data Ascii: as(e)]}values(){return this.set_.values()}get maxId(){return this.maxId_}has(e){return this.set_.has(e)}unset(e){Array.isArray(e)?e.forEach((e=>this.unset(e))):"object"==typeof e?this.unset(Object.keys(e).map((e=>Number(e)))):(this.set_.delete(Number(e)),
2024-05-21 09:21:36 UTC	1369	IN	Data Raw: 3d 33 36 3b 73 74 61 74 69 63 5b 53 2e 70 6f 6c 69 63 79 56 65 72 73 69 6f 6e 5d 3d 36 3b 73 74 61 74 69 63 5b 53 2e 70 75 62 6c 69 73 68 65 72 43 6f 75 6e 74 72 79 43 6f 64 65 5d 3d 31 32 3b 73 74 61 74 69 63 5b 53 2e 70 75 62 6c 69 73 68 65 72 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 5d 3d 32 34 3b 73 74 61 74 69 63 5b 53 2e 70 75 62 6c 69 73 68 65 72 43 6f 6e 73 65 6e 74 73 5d 3d 32 34 3b 73 74 61 74 69 63 5b 53 2e 70 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 73 5d 3d 32 34 3b 73 74 61 74 69 63 5b 53 2e 70 75 72 70 6f 73 65 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 73 5d 3d 32 34 3b 73 74 61 74 69 63 5b 53 2e 70 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 5d 3d 31 3b 73 74 61 74 69 63 5b 53 2e 73 70 65 63 69 61 6c 46 Data Ascii: =36;static[S.policyVersion]=6;static[S.publisherCountryCode]=12;static[S.publisherLegitimateInterests]=24;static[S.publisherConsents]=24;static[S.purposeConsents]=24;static[S.purposeLegitimateInterests]=24;static[S.purposeOneTreatment]=1;static[S.specialF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.9	50029	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:36 UTC	1586	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=e4073818b930a11a&pvi=9636962f9d2316bf&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Farticle%2Ftop%2F926&furl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&sr=1280x1024&type=latest:brs&_=1716283293109&bidder=kueezrtb&at=display HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:36 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:21:36 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f4c2a178c83-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.9	50037	35.190.80.1	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:37 UTC	551	OUT	OPTIONS /report/v4?s=d3MErD6k7oycyfxVIY%2FuTOkKX7BJzAAuaApxqdY8saeScM%2FvAqFzlVbmCDK7QwGB1JdrfGQMlgL2q026RvPSAhI9tFdqF3DJEFtNDye7D0fONVIODt%2FErpOfmaQywtAasA4uwdpHLQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://some.growplow.events Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:38 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 21 May 2024 09:21:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.9	50038	35.190.80.1	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	488	OUT	POST /report/v4?s=d3MErD6k7oycyfxVIY%2FuTOkKX7BJzAAuaApxqdY8saeScM%2FvAqFzlVbmCDK7QwGB1JdrfGQMlgL2q026RvPSAhI9tFdqF3DJEFtNDye7D0fONVIODt%2FErpOfmaQywtAasA4uwdpHLQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 449 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:39 UTC	449	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 31 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 33 2c 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 70 68 61 73 65 22 3a 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 74 63 70 2e 72 65 73 65 74 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a Data Ascii: [{"age":416,"body":{"elapsed_time":53,"method":"POST","phase":"connection","protocol":"http/1.1","referrer":"https://custommapposter.com/","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":0,"type":"tcp.reset"},"type":"network-error","url":
2024-05-21 09:21:39 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 21 May 2024 09:21:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.9	50045	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	2787	OUT	GET /trinity.json?key_maker=%7B%22181d2778a224e92c%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&s=24578392-b58e-46e4-a691-326525b06b4f&pv=53ab0b31-9d1d-4a2b-a436-11202a2257d7&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22fd12b1fa-734d-470a-a46d-6675c5397d83%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20Apple [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxno
2024-05-21 09:21:39 UTC	752	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:21:39 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:21:38 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxnp; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:21:39 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 38 31 64 32 37 37 38 61 32 32 34 65 39 32 63 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 61 62 30 62 33 31 2d 39 64 31 64 2d 34 61 32 62 2d 61 34 33 36 2d 31 31 32 30 32 61 32 32 35 37 64 37 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"181d2778a224e92c":{}},"sbi_dc":"iad-2-","pv":"53ab0b31-9d1d-4a2b-a436-11202a2257d7","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.9	50044	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	460	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=b.r&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:39 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180391 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:39 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.9	50041	54.76.86.242	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	1017	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291547&to=240&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:21:40 UTC	454	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:39 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:39 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:40 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.9	50039	185.89.211.84	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	467	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChkI__eVARAKGAEgASgBMJ3PsbIGOAFAAUgBEJ3PsbIGGAA.; uuid2=6403784576581203868; receive-cookie-deprecation=1
2024-05-21 09:21:40 UTC	1358	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:39 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: cd3224a3-ed94-4e96-b80c-759d0a53fd41 Set-Cookie: XANDR_PANID=SltACv_Pfe5COjEKRkKMI87y3HB7x0V2EUvDLt_w_DgJqz9UmgzCuEaKbqX_IZzv9i__A8GYJ6JMWUpkYWgad510ORMmbwiM4bkpzlVeKoY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:39 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:39 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:39 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:40 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.9	50040	162.19.138.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	416	OUT	GET /g/v2/1013.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1
2024-05-21 09:21:40 UTC	185	IN	HTTP/1.1 400 Bad Request date: Tue, 21 May 2024 09:21:39 GMT transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:21:40 UTC	547	IN	Data Raw: 32 31 43 0d 0a 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 32 43 6f 6e 74 72 6f 6c 6c 65 72 2e 66 65 74 63 68 43 6c 69 65 6e 74 54 6f 53 65 72 76 65 72 28 6a 61 76 61 2e 6c 61 6e 67 2e 4c 6f 6e 67 2c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 71 75 65 73 74 42 6f 64 79 2c 6a 61 76 61 2e 6c 61 6e 67 2e 49 6e 74 65 67 65 72 2c 6a 61 76 61 2e 6c 61 6e 67 Data Ascii: 21CRequired request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang
2024-05-21 09:21:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.9	50042	54.76.86.242	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	1023	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291568&to=240&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:21:40 UTC	454	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:39 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:39 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:40 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.9	50043	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	683	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:40 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:39 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:40 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.9	50048	54.76.86.242	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	1057	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283291888&to=240&aun=mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=7526 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:21:40 UTC	454	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:39 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:39 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:40 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.9	50050	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	590	OUT	GET /content/prebid/prebidVid.7.16.0_26.min.js HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:21:40 UTC	567	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 565861 Connection: close server: nginx date: Tue, 21 May 2024 09:21:39 GMT last-modified: Thu, 02 May 2024 13:01:55 GMT etag: "66338ec3-8a265" expires: Wed, 21 May 2025 09:21:39 GMT cache-control: max-age=31536000 cache-control: public accept-ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 ca8cb14c76df16342491237cea8cfed6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: sTundDvzmKBmXRuVdzAiPmIqFuIH-WOBtZoB1mtN2uL4sD5ux41vpA==
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 37 2e 31 36 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 30 35 2d 30 32 0a 4d 6f 64 75 6c 65 73 3a 20 73 63 68 61 69 6e 2c 20 63 75 72 72 65 6e 63 79 2c 20 74 74 64 42 69 64 41 64 61 70 74 65 72 2c 20 6e 65 78 78 33 36 30 42 69 64 41 64 61 70 74 65 72 2c 20 73 74 72 6f 65 65 72 43 6f 72 65 42 69 64 41 64 61 70 74 65 72 2c 20 72 69 63 68 61 75 64 69 65 6e 63 65 42 69 64 41 64 61 70 74 65 72 2c 20 6d 69 6e 75 74 65 6d 65 64 69 61 42 69 64 41 64 61 70 74 65 72 2c 20 67 70 74 50 72 65 41 75 63 74 69 6f 6e 2c 20 73 6d 61 72 74 78 42 69 64 41 64 61 70 74 65 72 2c 20 6b 61 72 67 6f 42 69 64 41 64 61 70 74 65 72 2c 20 61 64 6b 65 72 6e 65 6c 42 69 64 41 64 61 70 74 65 72 2c 20 73 6f 6e 6f 62 69 42 69 64 41 64 61 70 Data Ascii: /* prebid.js v7.16.0Updated: 2024-05-02Modules: schain, currency, ttdBidAdapter, nexx360BidAdapter, stroeerCoreBidAdapter, richaudienceBidAdapter, minutemediaBidAdapter, gptPreAuction, smartxBidAdapter, kargoBidAdapter, adkernelBidAdapter, sonobiBidAdap
2024-05-21 09:21:40 UTC	16256	IN	Data Raw: 6c 6c 42 69 64 56 69 65 77 61 62 6c 65 42 69 64 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6f 65 28 65 2c 22 6f 6e 42 69 64 56 69 65 77 61 62 6c 65 22 2c 6e 29 7d 2c 4b 2e 63 61 6c 6c 42 69 64 64 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 6f 65 28 65 2c 22 6f 6e 42 69 64 64 65 72 45 72 72 6f 72 22 2c 7b 65 72 72 6f 72 3a 6e 2c 62 69 64 64 65 72 52 65 71 75 65 73 74 3a 74 7d 29 7d 3b 76 61 72 20 61 65 3d 4b 7d 2c 35 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 51 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 50 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 64 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 7d 29 3b 76 Data Ascii: llBidViewableBidder=function(e,n){oe(e,"onBidViewable",n)},K.callBidderError=function(e,n,t){oe(e,"onBidderError",{error:n,bidderRequest:t})};var ae=K},5339:function(e,n,t){t.d(n,{Q1:function(){return U},PZ:function(){return O},dX:function(){return k}});v
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 65 75 65 69 6e 67 20 61 75 63 74 69 6f 6e 20 64 75 65 20 74 6f 20 6c 69 6d 69 74 65 64 20 65 6e 64 70 6f 69 6e 74 20 63 61 70 61 63 69 74 79 22 29 2c 42 2e 70 75 73 68 28 69 29 29 7d 72 65 74 75 72 6e 7b 61 64 64 42 69 64 52 65 63 65 69 76 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6a 3d 6a 2e 63 6f 6e 63 61 74 28 65 29 7d 2c 61 64 64 4e 6f 42 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 52 3d 52 2e 63 6f 6e 63 61 74 28 65 29 7d 2c 65 78 65 63 75 74 65 43 61 6c 6c 62 61 63 6b 3a 4b 2c 63 61 6c 6c 42 69 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 67 3d 22 73 74 61 72 74 65 64 22 2c 66 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 76 61 72 20 65 3d 64 2e 6d 65 61 73 75 72 65 54 69 6d 65 28 22 72 65 71 75 65 73 74 42 69 64 73 2e 6d 61 6b 65 52 65 71 75 65 73 74 73 22 Data Ascii: eueing auction due to limited endpoint capacity"),B.push(i))}return{addBidReceived:function(e){j=j.concat(e)},addNoBid:function(e){R=R.concat(e)},executeCallback:K,callBids:function(){g="started",f=Date.now();var e=d.measureTime("requestBids.makeRequests"
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 29 7d 76 61 72 20 77 3d 5b 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 62 28 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 6f 72 74 62 32 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 20 27 6f 72 62 74 32 27 20 63 6f 6e 66 69 67 20 2d 20 75 73 65 20 72 65 71 75 65 73 74 20 70 61 72 61 6d 65 74 65 72 73 20 69 6e 73 74 65 61 64 22 29 7d 7d 29 2c 65 7d 5d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 31 Data Ascii: Object.assign({},n)}var w=[b,function(){var e=b();return Object.defineProperty(e,"ortb2",{get:function(){throw new Error("invalid access to 'orbt2' config - use request parameters instead")}}),e}].map((function(e){return function(){if(arguments.length<=1
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 70 75 73 68 28 7b 6b 65 79 3a 65 2c 76 61 6c 75 65 3a 6e 7d 29 7d 7d 29 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 6e 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 2c 72 3d 74 2e 67 65 74 4e 61 74 69 76 65 52 65 71 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 4e 3a 72 2c 6f 3d 65 2e 61 73 73 65 74 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 75 2e 56 39 29 28 64 2e 46 59 2c 65 29 7d 29 29 3b 72 65 74 75 72 6e 20 71 28 65 2c 6e 2c 6f 2c 7b 67 65 74 4e 61 74 69 76 65 52 65 71 3a 69 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 2c 6e 29 7b 76 61 72 20 74 3d 61 72 67 75 Data Ascii: push({key:e,value:n})}})),u}function x(e,n){var t=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},r=t.getNativeReq,i=void 0===r?N:r,o=e.assets.map((function(e){return(0,u.V9)(d.FY,e)}));return q(e,n,o,{getNativeReq:i})}function Z(e,n){var t=argu
2024-05-21 09:21:40 UTC	8351	IN	Data Raw: 2c 5f 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 7d 2c 61 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 62 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 65 7d 2c 64 35 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 6e 7d 2c 64 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 65 7d 2c 64 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 6e 7d 2c 65 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 2c 65 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 6e 7d 2c 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 6e 7d 2c 65 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 65 7d 2c 66 72 3a 66 75 6e 63 Data Ascii: ,_d:function(){return B},ak:function(){return O},bd:function(){return Ze},d5:function(){return sn},d8:function(){return ee},dj:function(){return yn},e7:function(){return F},ei:function(){return nn},en:function(){return ln},ew:function(){return Ne},fr:func
2024-05-21 09:21:40 UTC	16320	IN	Data Raw: 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 53 4b 70 62 6a 73 2e 61 64 55 6e 69 74 73 3b 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 64 65 72 7d 29 29 2e 72 65 64 75 63 65 28 77 65 2c 5b 5d 29 7d 29 29 2e 72 65 64 75 63 65 28 77 65 2c 5b 5d 29 2e 66 69 6c 74 65 72 28 62 65 29 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 24 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 29 26 26 24 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 Data Ascii: .length>0&&void 0!==arguments[0]?arguments[0]:SKpbjs.adUnits;return e.map((function(e){return e.bids.map((function(e){return e.bidder})).reduce(we,[])})).reduce(we,[]).filter(be)}function Se(){if(window.googletag&&$(window.googletag.pubads)&&$(window.goog
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 5d 3d 6e 5b 74 5d 7d 29 29 2c 65 7d 29 2c 65 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 75 2c 63 3d 7b 7d 2c 73 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 6e 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 70 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 22 73 79 6e 63 22 2c 65 2c 6e 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 70 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 2e 61 70 70 Data Ascii: ){return n&&Object.keys(n).forEach((function(t){e[t]=n[t]})),e}),e)};function a(e){var u,c={},s=[];function d(e,n){return"function"==typeof e?p.call(null,"sync",e,n):"string"==typeof e&&"function"==typeof n?p.apply(null,arguments):"object"==typeof e?f.app
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 4a 4c 29 28 6e 2c 74 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 73 69 7a 65 4e 61 74 69 76 65 48 65 69 67 68 74 22 3a 74 2e 68 65 69 67 68 74 3d 6e 2e 68 65 69 67 68 74 2c 74 2e 77 69 64 74 68 3d 6e 2e 77 69 64 74 68 2c 45 28 74 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 28 30 2c 63 2e 65 36 29 28 6e 2c 74 29 7d 7d 7d 29 3b 76 61 72 20 53 3d 72 28 31 39 37 34 29 2c 6b 3d 72 28 39 30 36 32 29 2c 4f 3d 72 28 34 32 34 37 29 2c 49 3d 72 28 34 36 37 39 29 2c 42 3d 72 28 32 37 39 37 29 2c 6a 3d 72 28 35 39 37 35 29 2c 55 3d 5b 5d 2c 5f 3d 22 74 61 72 67 65 74 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 61 6c 6c 6f 77 54 61 72 67 65 74 69 6e 67 4b 65 79 73 22 2c 50 3d 22 74 61 72 67 65 74 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 61 64 64 54 61 72 67 65 74 69 6e 67 Data Ascii: JL)(n,t));break;case"resizeNativeHeight":t.height=n.height,t.width=n.width,E(t);break;default:(0,c.e6)(n,t)}}});var S=r(1974),k=r(9062),O=r(4247),I=r(4679),B=r(2797),j=r(5975),U=[],_="targetingControls.allowTargetingKeys",P="targetingControls.addTargeting
2024-05-21 09:21:40 UTC	16192	IN	Data Raw: 55 6e 69 74 43 6f 64 65 2c 7b 62 69 64 73 3a 65 7d 29 7d 29 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2c 6e 29 7d 29 2c 7b 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3b 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 3d 3d 72 7c 7c 28 30 2c 69 2e 6a 43 29 28 65 2c 6e 2c 74 29 7d 24 2e 67 65 74 41 64 73 65 72 76 65 72 54 61 72 67 65 74 69 6e 67 46 6f 72 41 64 55 6e 69 74 43 6f 64 65 53 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 28 30 2c 69 2e 50 4e 29 28 22 49 6e 76 6f 6b 69 6e 67 20 53 4b 70 62 6a 73 2e 67 65 74 41 64 73 65 Data Ascii: UnitCode,{bids:e})})).reduce((function(e,n){return Object.assign(e,n)}),{})}function Se(e,n,t){var r=n.querySelector(t);e.parentNode&&e.parentNode===r\|\|(0,i.jC)(e,n,t)}$.getAdserverTargetingForAdUnitCodeStr=function(e){if((0,i.PN)("Invoking SKpbjs.getAdse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.9	50051	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	2238	OUT	GET /live/liveVideo.php?vpaidManager=sekindo&s=58057&ri=6C69766553746174737C736B317B54307D7B64323032342D30352D32315F31327D7B7331353234323239307D7B4333307D7B535933567A64473974625746776347397A644756794C6D4E7662513D3D7D7B626368726F6D657D7B716465736B746F707D7B6F77696E646F77737D7B583639307D7B593430307D7B66317D7B4C393938317DFEFE&userIpAddr=8.46.123.175&userUA=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&debugInformation=&isWePassGdpr=1&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1&noViewableMidrollPolicy=vary&isDoublePreroll=1&autoSkipVideoSec=15&c2pWaitTime=0&sdkv=&isSinglePageFloatSupport=0&availCampaigns=&isAmpIframe=0&tagKeywords=&cbuster=1716283294&csuuid=664c679d515d1&debugInfo=15242290_&debugPlayerSession=&pubUrlDEMO=&isAsyncDEMO=0&customPlaylistIdDEMO=&sta=15242290&showLogo=0&clkUrl=&plMult=-1&schedule=eyJwcmVfcm9sbCI6MSwibWlkX3JvbGwiOltdLCJnYXAiOiJhdXRvIn0%3D&content=plembed22a2sngqtvwl&sec [TRUNCATED] Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:21:40 UTC	385	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: nginx date: Tue, 21 May 2024 09:21:39 GMT X-Cache: Miss from cloudfront Via: 1.1 dc0aad619823d3400ef947433d0af8fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HB2OtP5itLOcI7wfUikfiMFPTfSywWjNVb32_l9N5K2ROb-R3rTOjQ==
2024-05-21 09:21:40 UTC	15118	IN	Data Raw: 33 62 30 36 0d 0a 2f 2f 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 09 09 09 74 72 79 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 2f 2f 67 65 74 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 65 20 67 6f 6f 67 6c 65 5f 61 64 73 5f 69 66 72 61 6d 65 20 70 61 72 65 6e 74 20 64 69 76 0d 0a 09 09 09 09 76 61 72 20 77 20 3d 20 77 69 6e 64 6f 77 3b 0d 0a 09 09 09 09 76 61 72 20 70 61 72 65 6e 74 44 69 76 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 09 09 09 09 76 61 72 20 62 61 73 65 49 66 72 61 6d 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 09 09 09 09 76 61 72 20 77 69 6e 64 6f 77 50 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 09 09 09 09 69 66 20 28 77 20 26 Data Ascii: 3b06// <script type="text/javascript">try{//get a reference to the google_ads_iframe parent divvar w = window;var parentDiv = undefined;var baseIframe = undefined;var windowParentDocument = undefined;if (w &
2024-05-21 09:21:40 UTC	16328	IN	Data Raw: 33 66 63 30 0d 0a 20 20 20 20 20 20 20 20 73 6b 69 6e 43 6f 6e 74 65 6e 74 54 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 65 6c 61 74 65 64 49 74 65 6d 73 54 64 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 6e 43 6f 6e 74 65 6e 74 54 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 6c 61 79 65 72 54 64 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 76 69 64 50 6c 61 63 65 48 6f 6c 64 65 72 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 30 30 25 27 3b 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 2f 5c 2f 44 65 63 6c 61 72 65 20 76 61 72 73 5c 6e 20 20 20 20 20 20 20 20 76 61 72 20 73 74 72 42 72 65 61 6b 41 64 64 65 64 54 78 74 20 3d 20 5c 22 5c 75 32 30 32 36 5c 22 3b 5c 6e 20 20 20 20 20 20 20 20 76 61 72 20 72 65 61 64 4d 6f Data Ascii: 3fc0 skinContentTr.appendChild(relatedItemsTd);\n skinContentTr.appendChild(playerTd);\n }\n vidPlaceHolder.style.width = '100%';\n\n \/\/Declare vars\n var strBreakAddedTxt = \"\u2026\";\n var readMo
2024-05-21 09:21:40 UTC	16328	IN	Data Raw: 33 66 63 30 0d 0a 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 66 69 67 2e 61 64 49 73 50 6c 61 79 69 6e 67 29 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 2e 6e 65 78 74 43 6f 6e 74 65 6e 74 49 6e 64 65 78 20 3d 20 69 6e 64 65 78 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 2e 69 6e 74 65 6e 74 49 6e 69 74 69 61 74 6f 72 20 3d 20 27 75 73 65 72 53 77 69 74 63 68 43 6f 6e 74 65 6e 74 46 53 27 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 2e 62 75 73 2e 74 72 69 67 67 65 Data Ascii: 3fc0 if (config.adIsPlaying)\n {\n return;\n }\n config.nextContentIndex = index;\n config.intentInitiator = 'userSwitchContentFS';\n config.bus.trigge
2024-05-21 09:21:40 UTC	14936	IN	Data Raw: 33 61 35 30 0d 0a 20 20 3c 74 64 20 20 73 74 79 6c 65 3d 5c 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 70 72 69 6d 69 73 4c 6f 67 6f 5c 22 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 32 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 70 72 6f 6d 6f 74 65 64 42 79 5c 22 20 73 74 79 6c 65 3d 5c 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 20 2d 33 70 78 3b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 33 70 78 5c 22 20 Data Ascii: 3a50 <td style=\"text-align: right\">\n <div id=\"primisLogo\" style=\"margin-right: -2px; display: inline-flex; cursor: pointer;\">\n <div id=\"promotedBy\" style=\"position:relative; top: -3px; padding-right: 3px\"
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 37 66 38 30 0d 0a 20 20 20 20 69 66 28 21 28 69 20 3d 3d 20 6e 75 6d 4f 66 54 68 75 6d 62 73 2d 31 29 29 74 68 75 6d 62 4f 62 6a 2e 70 6c 61 79 6c 69 73 74 54 68 75 6d 62 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 20 3d 20 70 61 64 64 69 6e 67 42 65 74 77 65 65 6e 54 68 75 6d 62 73 20 2b 20 5c 22 70 78 5c 22 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 75 6d 62 73 41 72 72 61 79 2e 70 75 73 68 28 74 68 75 6d 62 4f 62 6a 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6c 61 74 65 64 49 74 65 6d 73 57 72 61 70 70 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 75 6d 62 4f 62 6a 2e 70 6c 61 79 6c 69 73 74 54 68 75 6d 62 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 7d Data Ascii: 7f80 if(!(i == numOfThumbs-1))thumbObj.playlistThumb.style.paddingBottom = paddingBetweenThumbs + \"px\";\n thumbsArray.push(thumbObj);\n relatedItemsWrapper.appendChild(thumbObj.playlistThumb);\n }\n }
2024-05-21 09:21:40 UTC	16264	IN	Data Raw: 6c 29 5c 6e 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 63 6f 6e 66 69 67 2e 66 6c 6f 77 53 74 61 74 75 73 20 7c 7c 20 63 6f 6e 66 69 67 2e 46 53 73 65 72 76 69 63 65 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 29 72 65 74 75 72 6e 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 76 69 64 50 6c 61 63 65 48 6f 6c 64 65 72 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 76 61 6c 2e 70 6c 61 79 65 72 57 69 64 74 68 20 2b 27 70 78 27 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 76 69 64 50 6c 61 63 65 48 6f 6c 64 65 72 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 76 61 6c 2e 70 6c 61 79 65 72 48 65 69 67 68 74 20 2b 27 70 78 27 3b 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 2f 5c 2f 20 6e 65 65 64 20 74 6f 20 66 69 72 73 74 20 Data Ascii: l)\n {\n if(config.flowStatus \|\| config.FSservice.isFullscreen)return;\n vidPlaceHolder.style.width = val.playerWidth +'px';\n vidPlaceHolder.style.height = val.playerHeight +'px';\n\n \/\/ need to first
2024-05-21 09:21:40 UTC	16328	IN	Data Raw: 33 66 63 30 0d 0a 6d 73 2e 66 6f 6e 74 4c 69 6e 6b 73 29 3b 5c 6e 5c 6e 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 43 75 73 74 6f 6d 46 6f 6e 74 4c 69 6e 6b 73 28 66 6f 6e 74 4c 69 6e 6b 73 29 5c 6e 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 66 6f 6e 74 4c 69 6e 6b 73 29 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 73 41 72 72 61 79 20 3d 20 66 6f 6e 74 4c 69 6e 6b 73 2e 73 70 6c 69 74 28 5c 22 23 21 23 5c 22 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 6b 20 3d 20 30 3b 20 6b 20 3c 20 6c 69 6e 6b 73 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 20 6b 2b 2b 29 5c 6e 20 20 20 20 20 20 20 20 20 Data Ascii: 3fc0ms.fontLinks);\n\n function addCustomFontLinks(fontLinks)\n {\n if(fontLinks)\n {\n var linksArray = fontLinks.split(\"#!#\");\n for (var k = 0; k < linksArray.length; k++)\n
2024-05-21 09:21:40 UTC	16328	IN	Data Raw: 33 66 63 30 0d 0a 66 28 28 6c 69 6e 65 48 65 69 67 68 74 2a 6c 69 6e 65 73 4e 75 6d 29 20 3c 20 6f 62 6a 31 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 6d 70 41 72 72 20 3d 20 73 74 72 41 72 72 61 79 2e 73 6c 69 63 65 28 30 2c 20 69 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6a 20 3d 20 69 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 28 28 6c 69 6e 65 48 65 69 67 68 74 2a 6c 69 6e 65 73 4e 75 6d 29 20 3c 20 6f 62 6a 31 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 Data Ascii: 3fc0f((lineHeightlinesNum) < obj1.clientHeight)\n {\n var tmpArr = strArray.slice(0, i);\n var j = i;\n while((lineHeightlinesNum) < obj1.clientHeight)\n {\n
2024-05-21 09:21:40 UTC	16319	IN	Data Raw: 33 66 62 37 0d 0a 73 65 4c 61 79 6f 75 74 3a 20 27 65 78 70 6f 73 65 4c 61 79 6f 75 74 27 2c 20 2f 2f 7b 74 79 70 65 3a 27 65 78 70 6f 73 65 4c 61 79 6f 75 74 27 2c 63 6f 6e 74 65 6e 74 3a 6d 6f 75 73 65 45 76 65 6e 74 7d 7d 2f 2f 54 4f 44 4f 20 66 69 6e 64 20 75 6e 69 71 75 65 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 6d 75 73 65 20 65 76 65 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 64 45 76 65 6e 74 3a 27 61 64 45 76 65 6e 74 27 2c 20 2f 2f 7b 74 79 70 65 3a 27 61 64 45 76 65 6e 74 27 2c 63 6f 6e 74 65 6e 74 3a 7b 61 64 53 74 61 72 74 65 64 3a 58 58 2c 20 70 61 72 61 6d 73 3a 7b 63 6f 6e 74 72 6f 6c 73 3a 58 58 2c 20 73 6b 69 70 54 69 6d 65 3a 58 58 7d 7d 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 67 43 6f 76 65 72 42 74 6e 73 44 69 73 70 6c 61 Data Ascii: 3fb7seLayout: 'exposeLayout', //{type:'exposeLayout',content:mouseEvent}}//TODO find unique solution for muse event adEvent:'adEvent', //{type:'adEvent',content:{adStarted:XX, params:{controls:XX, skipTime:XX}}} bgCoverBtnsDispla
2024-05-21 09:21:40 UTC	16384	IN	Data Raw: 66 66 30 30 0d 0a 31 32 63 32 2e 39 31 32 20 32 2e 33 30 34 20 36 2e 34 36 34 20 33 2e 34 38 38 20 31 30 2e 30 31 36 20 33 2e 34 38 38 20 32 2e 33 36 38 20 30 20 34 2e 37 33 36 2d 2e 35 34 34 20 36 2e 39 34 34 2d 31 2e 36 20 35 2e 35 33 36 2d 32 2e 36 35 36 20 39 2e 30 35 36 2d 38 2e 32 35 36 20 39 2e 30 35 36 2d 31 34 2e 34 76 2d 34 31 36 63 30 2d 36 2e 31 34 34 2d 33 2e 35 32 2d 31 31 2e 37 34 34 2d 39 2e 30 35 36 2d 31 34 2e 34 33 32 7a 4d 33 36 38 2e 39 39 32 20 31 32 36 2e 38 35 37 63 2d 36 2e 33 30 34 2d 36 2e 32 30 38 2d 31 36 2e 34 31 36 2d 36 2e 31 31 32 2d 32 32 2e 36 32 34 2e 31 32 38 2d 36 2e 32 30 38 20 36 2e 33 30 34 2d 36 2e 31 34 34 20 31 36 2e 34 31 36 2e 31 32 38 20 32 32 2e 36 35 36 43 33 37 30 2e 36 38 38 20 31 37 33 2e 35 31 33 20 33 Data Ascii: ff0012c2.912 2.304 6.464 3.488 10.016 3.488 2.368 0 4.736-.544 6.944-1.6 5.536-2.656 9.056-8.256 9.056-14.4v-416c0-6.144-3.52-11.744-9.056-14.432zM368.992 126.857c-6.304-6.208-16.416-6.112-22.624.128-6.208 6.304-6.144 16.416.128 22.656C370.688 173.513 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.9	50094	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:39 UTC	364	OUT	GET /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:40 UTC	296	IN	HTTP/1.1 204 No Content content-length: 0 date: Tue, 21 May 2024 09:21:39 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.9	50095	147.182.216.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:40 UTC	1063	OUT	GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=Tgn15DZrGHhOd6MWz22uP3gCJjocIQFEPnVAaRBDd20TcXoKf1VXLmFOAAVBcGJEIXFYe1MUYXVMAFRAc2ITf3ANLAEEe2RPUARMJWpBcX1KY0YAfmAbBAJFd2sTJH5cfVMCeW9MVApMdGtQa2pefFNXe2ZJCgFGdG1FcnBafFcHKG5MUwRXaHhEdH8JeVRVK2MZBlRHJWsQcH4LeFFUe2FYHhBDd20TcnBZd1VXLmFOAAVBcGJEIXsNKVcUYXVMAQUUcmsUc3kJLFICf2BOBgpDImIXJSpKY0YAfmccBgBHIGhFcSwKLQIBdWNPUVBMfDhQa2pefFNXeDEYUQFGdG1FcnBafFcHKG5MCgRXaHhEdCwOK1YDf2JOUAUUJjhCdS5ZelcAeGFYHhBDd2kRcH4NeVMCe2JLBQUUJ2IUIypRKlUUEHtYUV0AKi5QfXhEbQNSPSVYCEkIaHgBIjsbJgtYb21YBlETcG8WJnpFfQBTKXpKAlYRaWwQdC1FKgAPeWYeUQdMfG5GZWRKLAtYIzIZRlsaKhMWZXJKeVFUf2ZLC1cTJWxBJSsKewUBfTNPClAXZic%3D
2024-05-21 09:21:40 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:21:40 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.9	50075	104.22.53.86	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:40 UTC	603	OUT	GET /api/1.0/id5-api.js HTTP/1.1 Host: cdn.id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1
2024-05-21 09:21:40 UTC	622	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:40 GMT Content-Type: text/javascript;charset=utf-8 Content-Length: 95268 Connection: close x-amz-id-2: 15DcHWInvn5CgG3291NVgQauXX1dMRaNp7uLsr+AIZL+k3IFqQdrGh7R9FE6u3WLEEYr4Uvd/hvj8dOkH6GavQ== x-amz-request-id: CVXRT6VPHMV0W9NE Last-Modified: Wed, 08 May 2024 12:31:06 GMT ETag: "975872beea6fa436507d8a74321584b7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 CF-Cache-Status: HIT Age: 3156 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 88737f662cfc72a7-EWR
2024-05-21 09:21:40 UTC	747	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 69 64 35 69 6f 2f 69 64 35 2d 61 70 69 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 30 2e 36 35 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 69 64 35 2e 69 6f 2f 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 76 61 72 20 69 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 2c 65 26 26 28 69 3d 69 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f Data Ascii: /** * @id5io/id5-api.js * @version v1.0.65 * @link https://id5.io/ * @license Apache-2.0 */!function(){"use strict";function r(t,e){var i,r=Object.keys(t);return Object.getOwnPropertySymbols&&(i=Object.getOwnPropertySymbols(t),e&&(i=i.filter(functio
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 69 28 65 29 7d 61 2e 64 6f 6e 65 3f 74 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 72 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 61 2e 61 70 70 6c 79 28 65 2c 6f 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 63 28 72 2c 74 2c 69 2c 73 2c 6e 2c 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 63 28 72 2c 74 2c 69 2c 73 2c 6e 2c 22 74 68 72 6f 77 22 2c 65 29 7d 73 28 76 6f 69 64 20 30 29 7d 29 7d 7d Data Ascii: (e){return void i(e)}a.done?t(c):Promise.resolve(c).then(r,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,i){var r=a.apply(e,o);function s(e){c(r,t,i,s,n,"next",e)}function n(e){c(r,t,i,s,n,"throw",e)}s(void 0)})}}
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 65 3f 6e 75 6c 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 75 6c 6c 21 3d 69 29 7b 76 61 72 20 72 2c 73 2c 6e 2c 6f 2c 61 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 3b 74 72 79 7b 69 66 28 6e 3d 28 69 3d 69 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 69 29 21 3d 3d 69 29 72 65 74 75 72 6e 3b 63 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 63 3d 28 72 3d 6e 2e 63 61 6c 6c 28 69 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 2c 61 2e 6c 65 6e 67 74 68 21 Data Ascii: on(e,t){var i=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=i){var r,s,n,o,a=[],c=!0,l=!1;try{if(n=(i=i.call(e)).next,0===t){if(Object(i)!==i)return;c=!1}else for(;!(c=(r=n.call(i)).done)&&(a.push(r.value),a.length!
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 73 2c 6e 3d 21 30 2c 6f 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 69 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 21 30 2c 73 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 69 2e 72 65 74 75 72 6e 7c 7c 69 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 73 7d 7d 7d 7d 63 6c 61 73 73 20 65 7b 64 65 62 75 67 Data Ascii: objects must have a [Symbol.iterator]() method.")}var s,n=!0,o=!1;return{s:function(){i=i.call(e)},n:function(){var e=i.next();return n=e.done,e},e:function(e){o=!0,s=e},f:function(){try{n\|\|null==i.return\|\|i.return()}finally{if(o)throw s}}}}class e{debug
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 65 61 74 65 42 72 6f 61 64 63 61 73 74 4d 65 73 73 61 67 65 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6e 65 77 20 76 28 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 5f 73 65 6e 64 65 72 49 64 2c 5f 2c 2b 2b 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 53 65 71 4e 62 2c 65 2c 74 7c 7c 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 7d 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eateBroadcastMessage(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:e.constructor.name;return new v(Date.now(),this._senderId,_,++this._messageSeqNb,e,t\|\|e.constructor.name)}createResponse(e,t){var i=2<arguments.length&&void 0!==arguments
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 69 73 7d 5f 68 61 6e 64 6c 65 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 74 2e 74 61 72 67 65 74 5d 3b 69 66 28 65 29 74 72 79 7b 65 5b 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 5d 28 2e 2e 2e 74 2e 6d 65 74 68 6f 64 41 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 65 29 7b 74 68 69 73 2e 5f 6c 6f 67 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 77 68 69 6c 65 20 68 61 6e 64 6c 69 6e 67 20 6d 65 74 68 6f 64 20 63 61 6c 6c 20 22 2c 74 2c 65 29 7d 7d 7d 63 6c 61 73 73 20 43 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 67 3b 6c 28 74 68 69 73 Data Ascii: is}_handle(t){const e=this._targets[t.target];if(e)try{e[t.methodName](...t.methodArguments)}catch(e){this._log.error("Error while handling method call ",t,e)}}}class C{constructor(e,t){var i=2<arguments.length&&void 0!==arguments[2]?arguments[2]:g;l(this
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 61 73 74 4d 65 73 73 61 67 65 28 65 2c 74 29 29 7d 73 65 6e 64 52 65 73 70 6f 6e 73 65 4d 65 73 73 61 67 65 28 65 2c 74 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 74 68 69 73 2e 5f 6c 6f 67 2e 64 65 62 75 67 28 22 53 65 6e 64 69 6e 67 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 22 2c 65 2c 69 2c 74 29 2c 74 68 69 73 2e 5f 70 6f 73 74 4d 65 73 73 61 67 65 28 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 46 61 63 74 6f 72 79 2e 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 2c 69 29 29 7d 75 6e 69 63 61 73 74 4d 65 73 73 61 67 65 28 65 2c 74 29 7b 76 Data Ascii: astMessage(e,t))}sendResponseMessage(e,t){var i=2<arguments.length&&void 0!==arguments[2]?arguments[2]:t.constructor.name;this._log.debug("Sending response message",e,i,t),this._postMessage(this._messageFactory.createResponse(e,t,i))}unicastMessage(e,t){v
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 50 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 45 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 44 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4e 75 6d 62 65 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 69 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 31 3b 69 66 28 52 28 65 29 7c 7c 4f 28 65 29 29 72 65 74 75 72 6e 21 28 30 3c 65 Data Ascii: ction P(e){return A(e,E)}function O(e){return A(e,D)}function R(e){return A(e,b)}function x(e){return A(e,"Number")}function L(e){return A(e,"Object")}function U(e){return void 0!==e}function N(t,i){if(!function(e){if(!e)return 1;if(R(e)\|\|O(e))return!(0<e
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 61 74 28 69 5b 74 5d 29 29 2e 6a 6f 69 6e 28 22 26 22 29 29 29 3a 22 22 29 2b 28 65 2e 68 61 73 68 3f 22 23 22 2e 63 6f 6e 63 61 74 28 65 2e 68 61 73 68 29 3a 22 22 29 3b 76 61 72 20 69 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 69 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 50 28 4d 61 74 68 2e 69 6d 75 6c 29 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 69 6d 75 6c 28 65 2c 74 29 3b 76 61 72 20 69 3d 28 34 31 39 34 33 30 33 26 65 29 2a 28 74 7c 3d 30 29 3b 72 65 74 75 72 6e 20 34 32 39 30 37 37 32 39 39 32 26 65 26 26 28 69 2b 3d 28 34 32 39 30 37 37 32 39 39 32 26 65 29 2a 74 7c 30 29 2c 30 7c 69 7d 65 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 30 3b 6c 65 74 20 73 3d 33 37 33 35 39 Data Ascii: at(i[t])).join("&"))):"")+(e.hash?"#".concat(e.hash):"");var i}function M(i,e){function r(e,t){if(P(Math.imul))return Math.imul(e,t);var i=(4194303&e)(t\|=0);return 4290772992&e&&(i+=(4290772992&e)t\|0),0\|i}e=1<arguments.length&&void 0!==e?e:0;let s=37359
2024-05-21 09:21:40 UTC	1369	IN	Data Raw: 73 65 43 6f 6e 73 65 6e 74 3a 21 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 36 29 7c 7c 21 28 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 30 29 26 26 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 2d 31 29 26 26 30 21 3d 3d 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 29 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 7c 7c 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 29 7d 7d 63 6c 61 73 73 20 48 7b 63 6f 6e 73 74 Data Ascii: seConsent:!!this.applicableSections.includes(6)\|\|!(!this.applicableSections.includes(0)&&!this.applicableSections.includes(-1)&&0!==this.applicableSections.length)&&(void 0===this.localStoragePurposeConsent\|\|this.localStoragePurposeConsent)}}class H{const

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.9	50105	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:40 UTC	2652	OUT	GET /gampad/ads?pvsid=2105897831518875&correlator=3505740865554898&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=9&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1716283297842&lmt=1715994881&adxs=330&adys=1703&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&vis=1&psz=300x0&msz=300x0&fws=4&ohw=543&ga_vid=1430325693.1716283288&ga_sid=1716283297&ga_hid=1137197241&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=ElYKDGlkN [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://custommapposter.com X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:41 UTC	1029	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Tue, 21 May 2024 09:21:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 21-May-2024 09:36:40 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:21:41 UTC	361	IN	Data Raw: 33 30 62 0d 0a 7b 22 2f 32 30 38 34 32 35 37 36 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 35 37 30 36 65 39 66 32 38 37 66 35 63 62 62 30 3a 54 3d 31 37 31 36 32 38 33 33 30 30 3a 52 54 3d 31 37 31 36 32 38 33 33 30 30 3a 53 3d 41 4c 4e 49 5f 4d 59 70 43 39 5a 58 31 48 72 6c 32 47 56 72 4d 47 5a 4a 42 34 48 5f 62 38 61 64 63 51 22 2c 31 37 34 39 39 37 39 33 30 30 2c 22 2f 22 2c 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 65 32 36 37 30 62 32 35 39 32 62 3a 54 3d 31 37 31 36 32 38 33 33 30 30 Data Ascii: 30b{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,[["ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ",1749979300,"/","custommapposter.com",1],["UID=00000e2670b2592b:T=1716283300
2024-05-21 09:21:41 UTC	425	IN	Data Raw: 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 4e 61 75 37 38 4f 31 6e 6f 59 44 46 53 43 58 67 77 63 64 2d 34 63 50 6c 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: ll,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNau78O1noYDFSCXgwcd-4cPlg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"9",null,null,null,null,null,null,null,null,null,n
2024-05-21 09:21:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.9	50121	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:40 UTC	691	OUT	GET /pagead/managed/js/gpt/m202405090101/pubads_impl_page_level_ads.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:40 UTC	740	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 47857 X-XSS-Protection: 0 Date: Tue, 21 May 2024 00:38:07 GMT Expires: Wed, 21 May 2025 00:38:07 GMT Cache-Control: public, immutable, max-age=31536000 ETag: 6094103971024583102 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 31413 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:40 UTC	650	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 74 79 70 65 6f 66 20 67 6f 6f 67 6c 65 74 61 67 2e 5f 67 70 74 5f 6a 73 5f 6c 6f 61 64 5f 32 5f 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 67 70 74 5f 6a 73 5f 6c 6f 61 64 5f 32 5f 28 66 75 6e 63 74 69 6f 6e 28 5f 2c 5f 6d 29 7b 76 61 72 20 5a 53 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 66 66 28 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 62 3d 62 3f 62 28 29 2b 22 5c 6e 22 3a 22 22 2c 45 72 72 6f 72 28 62 2b 53 74 72 69 6e 67 28 61 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 61 54 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 24 53 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b Data Ascii: window.googletag&&typeof googletag._gpt_js_load_2_=='function'&&googletag._gpt_js_load_2_(function(_,_m){var ZS=function(a){var b=_.ff();if("function"!==typeof a)throw b=b?b()+"\n":"",Error(b+String(a));return a},aT=function(a){if(!$S.test(a))return null;
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 64 69 6e 67 2d 6c 65 66 74 22 3a 30 2c 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 3a 30 2c 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 73 74 61 74 69 63 22 2c 72 69 67 68 74 3a 22 61 75 74 6f 22 2c 74 6f 70 3a 22 61 75 74 6f 22 2c 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 22 3a 22 62 61 73 65 6c 69 6e 65 22 2c 76 69 73 69 62 69 6c 69 74 79 3a 22 76 69 73 69 62 6c 65 22 2c 77 69 64 74 68 3a 22 61 75 74 6f 22 2c 22 7a 2d 69 6e 64 65 78 22 3a 22 61 75 74 6f 22 7d 3b 5f 2e 4f 78 28 5f 2e 79 28 4f 62 6a 65 63 74 2c 22 6b 65 79 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 62 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 61 2e 73 74 79 6c 65 5b 5f 2e 67 79 28 63 29 5d 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 Data Ascii: ding-left":0,"padding-right":0,"padding-top":0,position:"static",right:"auto",top:"auto","vertical-align":"baseline",visibility:"visible",width:"auto","z-index":"auto"};_.Ox(_.y(Object,"keys").call(Object,b),function(c){var d=a.style[_.gy(c)];("undefined"
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 32 22 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 32 38 22 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 31 38 22 29 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 3b 62 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 32 38 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 33 34 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 31 32 22 29 3b Data Ascii: .setAttribute("y1","12");c.setAttribute("x2","28");c.setAttribute("y2","18");a.appendChild(c);b=b.createElementNS("http://www.w3.org/2000/svg","line");b.setAttribute("x1","28");b.setAttribute("y1","18");b.setAttribute("x2","34");b.setAttribute("y2","12");
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 3d 62 3e 61 3f 62 3e 65 3f 62 3a 65 3a 62 3c 65 3f 62 3a 65 7d 7d 72 65 74 75 72 6e 20 63 7d 2c 24 53 3d 2f 5e 28 2d 3f 5b 30 2d 39 2e 5d 7b 31 2c 33 30 7d 29 24 2f 2c 75 54 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 61 3d 5b 61 5d 3b 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 63 3d 61 2e 73 68 69 66 74 28 29 3b 21 31 21 3d 3d 62 28 63 29 26 26 28 63 3d 5f 2e 44 6a 28 63 2e 63 68 69 6c 64 72 65 6e 7c 7c 63 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7d 29 2c 63 2e 6c 65 6e 67 74 68 26 26 61 2e 75 6e 73 68 69 66 74 2e 61 70 70 6c 79 28 61 2c 5f 2e 54 69 28 63 29 29 29 7d 7d 2c 76 54 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d Data Ascii: =b>a?b>e?b:e:b<e?b:e}}return c},$S=/^(-?[0-9.]{1,30})$/,uT=function(a,b){for(a=[a];a.length;){var c=a.shift();!1!==b(c)&&(c=_.Dj(c.children\|\|c.childNodes\|\|[],function(d){return 1===d.nodeType}),c.length&&a.unshift.apply(a,_.Ti(c)))}},vT=function(a){var b=
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 61 2c 62 2c 63 2c 64 29 7b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 6e 75 6c 6c 3a 64 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 67 2e 64 61 74 61 29 7d 63 61 74 63 68 28 6b 29 7b 72 65 74 75 72 6e 7d 21 68 7c 7c 68 2e 67 6f 6f 67 4d 73 67 54 79 70 65 21 3d 3d 62 7c 7c 64 26 26 2f 5b 3a 7c 25 33 41 5d 6a 61 76 61 73 63 72 69 70 74 5c 28 2f 69 2e 74 65 73 74 28 67 2e 64 61 74 61 29 26 26 21 64 28 68 2c 67 29 7c 7c 63 28 68 2c 67 29 7d 3b 5f 2e 74 66 28 61 2c 22 6d 65 73 73 61 67 65 22 2c 65 29 3b 76 61 72 20 66 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 21 31 3b 66 7c 7c 28 66 3d 21 30 2c 67 3d 5f 2e 67 67 28 61 2c 22 6d 65 73 73 61 67 65 22 Data Ascii: a,b,c,d){d=void 0===d?null:d;var e=function(g){try{var h=JSON.parse(g.data)}catch(k){return}!h\|\|h.googMsgType!==b\|\|d&&/[:\|%3A]javascript\(/i.test(g.data)&&!d(h,g)\|\|c(h,g)};_.tf(a,"message",e);var f=!1;return function(){var g=!1;f\|\|(f=!0,g=_.gg(a,"message"
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 69 73 54 72 75 73 74 65 64 26 26 28 61 2e 67 3d 31 3d 3d 3d 5f 2e 6f 73 28 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 29 3f 21 30 3a 21 31 2c 61 2e 6c 28 63 2e 74 69 6d 65 53 74 61 6d 70 29 29 7d 3b 5f 2e 74 66 28 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 29 3b 5f 2e 4a 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 29 7d 29 3b 61 2e 67 3d 31 3d 3d 3d 5f 2e 6f 73 28 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 29 7d 2c 49 54 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 42 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f Data Ascii: isTrusted&&(a.g=1===_.os(a.B.document)?!0:!1,a.l(c.timeStamp))};_.tf(a.B.document,"visibilitychange",b);_.Jp(a,function(){return void a.B.document.removeEventListener("visibilitychange",b)});a.g=1===_.os(a.B.document)},IT=function(a){var b=a.B.document.bo
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 72 72 65 72 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 55 52 4c 3f 28 6e 65 77 20 55 52 4c 28 65 29 29 2e 6f 72 69 67 69 6e 3d 3d 3d 61 2e 42 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3a 21 31 3b 69 66 28 65 29 7b 66 3d 7b 42 63 3a 66 7d 3b 65 3d 5f 2e 41 28 61 2e 67 29 3b 66 6f 72 28 76 61 72 20 67 3d 65 2e 6e 65 78 74 28 29 3b 21 67 2e 64 6f 6e 65 3b 67 3d 65 2e 6e 65 78 74 28 29 29 7b 67 3d 67 2e 76 61 6c 75 65 3b 74 72 79 7b 67 28 66 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 7d 7d 3b 61 2e 42 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 64 29 3b 61 2e 42 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 63 29 3b 5f 2e 4a 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: rrer)&&"function"===typeof URL?(new URL(e)).origin===a.B.location.origin:!1;if(e){f={Bc:f};e=_.A(a.g);for(var g=e.next();!g.done;g=e.next()){g=g.value;try{g(f)}catch(h){}}}};a.B.addEventListener("focus",d);a.B.addEventListener("blur",c);_.Jp(a,function(){
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 47 22 3d 3d 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 6c 74 22 29 26 26 62 2e 70 75 73 68 28 22 20 22 2b 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 74 22 29 29 2c 62 2e 70 75 73 68 28 52 54 5b 61 2e 6e 6f 64 65 4e 61 6d 65 5d 29 3b 65 6c 73 65 20 66 6f 72 28 61 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 3b 61 3b 29 53 54 28 61 2c 62 2c 63 2c 64 29 2c 61 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 7d 2c 54 54 3d 2f 20 5c 78 41 44 20 2f 67 2c 55 54 3d 2f 5c 78 41 44 2f 67 2c 56 54 3d 2f 5c 75 32 30 30 42 2f 67 2c 57 54 3d 2f 20 2b 2f 67 2c 58 54 3d 2f 5e 5c 73 2a 2f 2c 59 54 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 5f 2e 42 2e 53 65 74 3b 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 Data Ascii: G"==a.nodeName&&a.hasAttribute("alt")&&b.push(" "+a.getAttribute("alt")),b.push(RT[a.nodeName]);else for(a=a.firstChild;a;)ST(a,b,c,d),a=a.nextSibling},TT=/ \xAD /g,UT=/\xAD/g,VT=/\u200B/g,WT=/ +/g,XT=/^\s*/,YT=function(a){var b=new _.B.Set;a.forEach(func
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 63 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 63 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3b 72 65 74 75 72 6e 21 64 7c 7c 30 3c 3d 5f 2e 47 61 28 62 2c 63 29 7c 7c 5f 2e 43 67 28 5f 2e 6d 42 28 24 54 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 63 2c 65 29 7d 29 7d 2c 21 31 2c 32 30 29 7d 2c 62 55 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 74 68 69 73 2e 6c 3d 61 3b 74 68 69 73 2e 67 3d 21 31 3b 74 68 69 73 2e 6a 3d 62 3b 74 68 69 73 2e 41 3d 74 68 69 73 2e 6a 2e 42 61 28 32 36 34 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 63 2e 67 26 26 28 5f 2e 58 53 7c 7c 28 64 3d 44 61 74 65 2e 6e 6f 77 28 29 29 Data Ascii: mozMatchesSelector\|\|c.msMatchesSelector\|\|c.oMatchesSelector;return!d\|\|0<=_.Ga(b,c)\|\|_.Cg(_.mB($T),function(e){return d.call(c,e)})},!1,20)},bU=function(a,b){var c=this;this.l=a;this.g=!1;this.j=b;this.A=this.j.Ba(264,function(d){c.g&&(_.XS\|\|(d=Date.now())
2024-05-21 09:21:40 UTC	1390	IN	Data Raw: 6a 54 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 5f 2e 56 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 73 6c 6f 74 54 79 70 65 3d 61 3b 74 68 69 73 2e 46 3d 62 3b 74 68 69 73 2e 70 69 3d 63 3b 74 68 69 73 2e 6d 61 3d 64 3b 74 68 69 73 2e 4c 61 3d 65 3b 74 68 69 73 2e 4f 66 3d 66 3b 74 68 69 73 2e 73 74 61 74 65 3d 31 3b 74 68 69 73 2e 71 65 6d 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 6e 65 77 20 5f 2e 69 69 3b 74 68 69 73 2e 67 3d 6e 65 77 20 5f 2e 69 69 3b 74 68 69 73 2e 6c 3d 6e 65 77 20 5f 2e 69 69 7d 3b 5f 2e 54 28 6a 54 2c 5f 2e 56 29 3b 76 61 72 20 68 55 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 76 66 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 72 65 74 75 72 6e 28 61 2e 6a Data Ascii: jT=function(a,b,c,d,e,f){_.V.call(this);this.slotType=a;this.F=b;this.pi=c;this.ma=d;this.La=e;this.Of=f;this.state=1;this.qem=null;this.j=new _.ii;this.g=new _.ii;this.l=new _.ii};_.T(jT,_.V);var hU=function(a){return _.vf(function(b){return b.return(a.j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.9	50128	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:40 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=3_1716283291_1716283293
2024-05-21 09:21:41 UTC	265	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:21:40 GMT server: envoy vary: accept-encoding x-envoy-upstream-service-time: 0 connection: close
2024-05-21 09:21:41 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.9	49866	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:41 UTC	605	OUT	POST /api/v2 HTTP/1.1 Host: e.serverbid.com Connection: keep-alive Content-Length: 837 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:41 UTC	837	OUT	Data Raw: 7b 22 70 6c 61 63 65 6d 65 6e 74 73 22 3a 5b 7b 22 64 69 76 4e 61 6d 65 22 3a 22 32 36 38 65 37 66 64 32 66 65 61 64 35 61 38 63 22 2c 22 61 64 54 79 70 65 73 22 3a 5b 34 5d 2c 22 75 6e 69 74 4e 61 6d 65 22 3a 22 63 6e 73 6d 62 6c 2d 61 75 64 69 6f 2d 37 32 38 78 39 30 2d 73 6c 69 64 65 72 22 2c 22 75 6e 69 74 49 64 22 3a 31 30 30 34 38 2c 22 73 69 74 65 49 64 22 3a 32 30 30 30 30 33 33 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 39 39 36 39 2c 22 7a 6f 6e 65 49 64 73 22 3a 5b 32 30 30 35 30 32 33 5d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 6e 75 6c 6c 7d 5d 2c 22 74 69 6d 65 22 3a 31 37 31 36 32 38 33 32 39 39 30 39 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 Data Ascii: {"placements":[{"divName":"268e7fd2fead5a8c","adTypes":[4],"unitName":"cnsmbl-audio-728x90-slider","unitId":10048,"siteId":2000033,"networkId":9969,"zoneIds":[2005023],"bidfloor":null}],"time":1716283299090,"url":"https://custommapposter.com/article/top/9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.9	50129	185.89.211.84	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:41 UTC	467	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChkI__eVARAKGAEgASgBMJ3PsbIGOAFAAUgBEJ3PsbIGGAA.; uuid2=6403784576581203868; receive-cookie-deprecation=1
2024-05-21 09:21:42 UTC	1358	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1a36a75f-63e8-4a62-b9e2-a1a4b2b70e80 Set-Cookie: XANDR_PANID=9-XqJteXZw8rDhfIwbDjTOycjFAHG7sd3WHY_0AvhD_0EUMRQVLn9EpKtkGmfDS8Th1Pn9j__GviylpIHivULN6dgx1NXuYwB1pNzSUxHoY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:42 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:42 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:42 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:42 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.9	50149	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:42 UTC	440	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=0ef234e7-fc25-4181-9fdc-65d9171ace67-flight HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:42 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180398 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:42 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.9	50143	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:42 UTC	938	OUT	GET /se/hb/timeout?publisherToken=5261-2296-01&adUnitId=32073708&timeout=1100 HTTP/1.1 Host: s.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
2024-05-21 09:21:42 UTC	419	IN	HTTP/1.1 204 No Content Server: openresty Date: Tue, 21 May 2024 09:21:42 GMT Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.9	50148	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:42 UTC	433	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:42 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180394 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:42 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.9	50132	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:42 UTC	683	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:42 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:42 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:42 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.9	50141	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:42 UTC	848	OUT	GET /visitor/isync?uid=513c4e190506981c315d38ccadf488f2&name=SEEDTAG&visitor=&gdpr=0&gdpr_consent_string=&us_privacy= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cs.seedtag.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:43 UTC	488	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: text/html; charset=UTF-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:42 GMT x-envoy-upstream-service-time: 3 server: ayl-lb-fra02 connection: close transfer-encoding: chunked
2024-05-21 09:21:43 UTC	5609	IN	Data Raw: 31 35 64 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 32 46 76 69 73 69 74 6f 72 25 32 46 73 79 6e 63 25 33 46 6e 61 6d 65 25 33 44 58 61 6e 64 72 25 32 42 25 32 35 45 32 25 32 35 38 30 25 32 35 39 33 25 32 42 49 6e 76 65 73 74 25 32 42 44 53 50 25 32 42 2d 25 32 42 42 61 6e 6e 65 72 25 32 36 74 74 6c 25 33 44 37 32 30 25 32 36 75 69 64 25 33 44 37 35 64 35 36 35 36 38 61 31 31 Data Ascii: 15dc<html><head><title></title></head><body><img style="display:none;" src="https://secure.adnxs.com/getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%2B-%2BBanner%26ttl%3D720%26uid%3D75d56568a11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.9	50134	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1687 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:44 UTC	1687	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 30 32 38 39 33 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283302893,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:21:44 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:44 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 7 server: istio-envoy
2024-05-21 09:21:44 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 32 38 35 35 31 61 37 63 62 62 39 30 63 63 61 39 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"28551a7cbb90cca9","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.9	50144	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	1324	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1380 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:21:44 UTC	1380	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 33 30 32 38 39 37 2c 22 62 69 64 49 64 22 3a 22 32 38 38 39 31 64 31 36 66 36 61 63 37 65 35 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 62 69 61 63 64 73 69 64 2d 66 32 69 63 2d 6a 69 74 62 2d 6b 6d 69 6c 2d 69 63 74 6f 61 6d 74 74 74 68 74 63 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 32 35 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283302897,"bidId":"28891d16f6ac7e52","referrer":null,"adUnitCode":"mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["300x25
2024-05-21 09:21:44 UTC	1204	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=yS012ZGIE88Nlt5QAIWU5JEpMIAkGRnN7AWV%2Fdg9ZeF4WBWAgOXF9dw8MelRCU2hxbnBraRoOfApBAmkgYn8sJl0KeF9BV2d4O3d6cw0aYk5CBmYgbHd5dglZLVpAB2Z1bn9%2FIwABfl1WGXN3aXAocwkLdl9HBWZ2b397dgsJK1VCVGdjdmV%2Fdg9ZeFwXU2UibiF7JAlaeVoXAmQjbHFraRoOfVsVAGlwYnYoJg4MfFtAAWl3PHQsIwsaYk5CBmYgbHYvcQlZLVpAB2Z1bn9%2FIwBdLA5WGXN3aXcvcQoKKl5DAzUjOCF%2BfQwNLQ5NDTNjdmV%2Fdg9ZewoWVmJyanB%2BcAAKfV9FUGh3YnFraRoOfQgSUWN0aHJ9Jw9ZLA5EBzdwb3R%2FcA4aYk5CBmIibXEscw8MeFlFAmYgOX8vIVoBK11WaH1jOSg8K0wadFxYFzYlKjVrf0NFYk4HUCIyMygnZwIaeg8SAWQlO3Vkd1xdKkFEBTUld3Erdl0VKwhNAWAlOXJwfQwMbEBWVj4vNCIqMVFXICUQF2tjbHIrdwkJdwkSVGdyOCQrcVkPfghBDTMjeDo%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:36:44 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 15799 date: Tue, 21 May 2024 09:21:44 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:21:44 UTC	14048	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 0b 8f eb 38 92 26 fa 57 ce 14 70 aa bb b1 7b aa f4 72 5a ee e9 d3 03 52 22 f5 b2 64 93 12 a9 c7 ad 8b 86 2d d9 92 2c 59 72 5a ca 94 e4 c1 fc f7 05 9d a7 aa 6b 7a ba b1 3b bb 17 17 bb 8b 4a 20 91 99 4a d1 a4 82 11 5f 44 7c 11 d4 bf 7e 77 3f 0d 6f ed 38 7c f7 c7 ff e7 5f bf cb fb be a9 4f e2 f7 ff f7 bf 7e 77 28 be fb e3 77 7f fa a7 2f 5f 3e a1 39 af 0e 5d 79 fa e3 a7 dd ed d4 25 9f cc 70 ef 98 7f fc b4 52 d7 b2 fc a2 4a eb 4f 06 15 7f ab f2 7a a5 49 7f 51 25 69 56 56 d2 a7 2f 5f fe fc a7 a2 7e ff 54 17 5f 7f 77 3c 1d f2 be fb cb cb 5a 95 94 97 df 7d 1a c6 a5 3d 7d fd dd ad 1f ea b1 ee bb 3f 1e 8e 43 df be 8d a7 7f 6e 4f e7 f1 8f d2 6d fe f4 cf 63 7f 13 bf fc f3 7b 3d d4 c7 ba ad c7 e5 8f 55 5d 14 a7 ee 9f 7f f7 e7 3f d5 Data Ascii: 8&Wp{rZR"d-,YrZkz;J J_D\|~w?o8\|_O~w(w/_>9]y%pRJOzIQ%iVV/_~T_w<Z}=}?CnOmc{=U]?
2024-05-21 09:21:44 UTC	1751	IN	Data Raw: 49 34 bf ee 37 f2 06 92 ba 4f 24 d8 32 47 58 c4 97 b0 41 64 3c f1 b1 97 04 23 db 6f 6f 2f 21 91 04 b3 56 2a a7 27 3b 64 45 b4 5e fa 98 29 c9 eb 75 e2 0d 5d 13 5d 74 44 5b f7 0b 9b 6e 89 37 75 1a 09 17 f3 c1 e2 b6 50 cc 6f c3 9a de 1b ec b6 fa 15 13 94 fb e5 10 a1 48 ef a8 34 78 00 dd 97 a0 0f f1 4a 22 87 66 b8 be 09 07 d1 16 8a 95 d8 b0 ed cf fb bb 54 06 27 36 1d 59 2e dd 2f 21 71 23 c2 d2 34 3e 6f b7 79 68 bd a3 49 fb e8 57 7b c9 54 8a 69 74 3b ed 47 5a a1 29 63 f1 90 fa ca e9 d5 2e b4 34 ad 83 10 39 1a 3a 51 cf bd f1 30 df 08 2d 11 95 d0 89 3a 79 e0 db 1a 4e dc 86 a0 13 8e d3 05 fb e1 6a c1 fb d1 e7 60 99 12 32 a6 fb 89 f2 d0 86 07 0e dc d4 16 7d ee 97 63 9d 90 c1 26 92 0b 14 f1 3c 0f e9 dd 9b 1a 81 29 15 f1 79 8b 77 dc 32 78 7c 48 ad fd 96 64 89 0f 6e Data Ascii: I47O$2GXAd<#oo/!V*';dE^)u]]tD[n7uPoH4xJ"fT'6Y./!q#4>oyhIW{Tit;GZ)c.49:Q0-:yNj`2}c&<)yw2x\|Hdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.9	50139	34.120.63.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	663	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 5609 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:21:44 UTC	5609	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926","ref":"","topMostLocation":"https://custommapposter.com/article/top/926","isTop":true,"canonical_url":"https://custommapposter.com/article/top/926","og_url":"http
2024-05-21 09:21:44 UTC	781	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:21:44 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:21:44 GMT x-envoy-upstream-service-time: 32 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:44 UTC	350	IN	Data Raw: 31 35 32 0d 0a 7b 22 69 64 22 3a 22 36 39 34 66 61 62 36 66 2d 38 32 65 38 2d 34 62 65 31 2d 38 32 62 38 2d 33 39 61 37 64 61 61 33 65 63 30 61 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 Data Ascii: 152{"id":"694fab6f-82e8-4be1-82b8-39a7daa3ec0a","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.9	50133	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1670 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:44 UTC	1670	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 32 39 34 33 65 30 64 37 61 35 36 62 37 63 63 61 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 37 34 34 37 66 36 64 37 2d 33 63 64 30 2d 34 64 39 33 2d 61 37 66 33 2d 63 62 35 62 61 62 38 30 38 62 32 64 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"2943e0d7a56b7cca":{"PlacementID":"ffd2f3e5d8d521d3e956b94b85e3cf84","TransactionID":"7447f6d7-3cd0-4d93-a7f3-cb5bab808b2d","Width":300,"Height":250,"AvailableSizes":"300x250","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:21:44 UTC	722	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:44 GMT content-length: 181 x-envoy-upstream-service-time: 9 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:44 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 31 66 39 36 61 31 36 64 63 39 64 65 34 33 31 33 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 31 66 39 36 61 31 36 64 63 39 64 65 34 33 31 33 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 42 69 64 49 44 22 3a 22 32 39 34 33 65 30 64 37 61 35 36 62 37 63 63 61 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"1f96a16dc9de4313ffd2f3e5d8d521d3","Placement":"ffd2f3e5d8d521d3e956b94b85e3cf84","CreativeID":"1f96a16dc9de4313ffd2f3e5d8d521d3","BidID":"2943e0d7a56b7cca"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.9	50142	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3177 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=3_1716283291_1716283293
2024-05-21 09:21:44 UTC	3177	OUT	Data Raw: 7b 22 61 22 3a 22 34 35 65 35 33 65 38 31 2d 31 36 30 66 2d 34 37 62 62 2d 62 37 31 30 2d 39 63 31 37 32 36 34 35 30 63 33 65 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 32 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 32 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"45e53e81-160f-47bb-b710-9c1726450c3e","B":0,"b":"custommapposter.com","brc":2,"bwc":0,"trc":2,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:44 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:43 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=4_1716283291_1716283304; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:44 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:21:44 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 4b 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4e 44 56 6c 4e 54 4e 6c 4f 44 45 74 4d 54 59 77 5a 69 30 30 4e 32 4a 69 4c 57 49 33 4d 54 41 74 4f 57 4d 78 4e Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgKIA5vPsbIGqAM06gMkNDVlNTNlODEtMTYwZi00N2JiLWI3MTAtOWMxN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.9	49879	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	605	OUT	POST /api/v2 HTTP/1.1 Host: e.serverbid.com Connection: keep-alive Content-Length: 839 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:44 UTC	839	OUT	Data Raw: 7b 22 70 6c 61 63 65 6d 65 6e 74 73 22 3a 5b 7b 22 64 69 76 4e 61 6d 65 22 3a 22 33 30 30 32 62 35 30 65 38 61 35 64 66 61 35 63 22 2c 22 61 64 54 79 70 65 73 22 3a 5b 35 5d 2c 22 75 6e 69 74 4e 61 6d 65 22 3a 22 63 6e 73 6d 62 6c 2d 61 75 64 69 6f 2d 33 30 30 78 32 35 30 2d 73 6c 69 64 65 72 22 2c 22 75 6e 69 74 49 64 22 3a 31 30 30 34 37 2c 22 73 69 74 65 49 64 22 3a 32 30 30 30 30 33 33 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 39 39 36 39 2c 22 7a 6f 6e 65 49 64 73 22 3a 5b 32 30 30 35 30 32 34 5d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 6e 75 6c 6c 7d 5d 2c 22 74 69 6d 65 22 3a 31 37 31 36 32 38 33 33 30 32 39 32 36 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f Data Ascii: {"placements":[{"divName":"3002b50e8a5dfa5c","adTypes":[5],"unitName":"cnsmbl-audio-300x250-slider","unitId":10047,"siteId":2000033,"networkId":9969,"zoneIds":[2005024],"bidfloor":null}],"time":1716283302926,"url":"https://custommapposter.com/article/top/
2024-05-21 09:21:44 UTC	535	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: application/json content-length: 16 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:21:44 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:21:44 GMT connection: close
2024-05-21 09:21:44 UTC	16	IN	Data Raw: 7b 22 64 65 63 69 73 69 6f 6e 73 22 3a 7b 7d 7d Data Ascii: {"decisions":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.9	50135	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1008 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; icu=ChkI__eVARAKGAEgASgBMJ3PsbIGOAFAAUgBEJ3PsbIGGAA.; uuid2=6403784576581203868
2024-05-21 09:21:44 UTC	1008	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 33 30 32 39 65 61 66 37 39 30 32 30 33 39 66 38 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 67 70 69 64 22 3a 22 2f Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"3029eaf7902039f8","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"gpid":"/
2024-05-21 09:21:44 UTC	1567	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:44 GMT Content-Type: application/json; charset=utf-8 Content-Length: 145 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: d4e0698e-68d3-4765-bd06-7fcfbf54961d Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:44 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChkI__eVARAKGAIgAigCMKjPsbIGOAJAAkgCEKjPsbIGGAE.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:44 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:44 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:44 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:44 UTC	145	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 33 30 32 39 65 61 66 37 39 30 32 30 33 39 66 38 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 35 35 37 37 34 32 35 35 36 31 38 32 39 38 32 35 32 38 36 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 35 30 31 34 34 34 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"3029eaf7902039f8","tag_id":32542723,"auction_id":"5577425561829825286","nobid":true,"ad_profile_id":501444}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.9	50147	159.203.178.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	1197	OUT	POST /prebid/multi/637e6546decb82d45236f0f8 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1456 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=KKR12wTvsVboSHboTDHYGEiQWATY6EU1uLHZAQGIHVmt4Vg02RDcSRTUHC2F4AVxjQjZUX3RXCWB9UQpmTzBBR2JTDGN4U1gwFDFBEDRAQ3F9BFwxQ2ROSjUAWGQpVF9kRmMVEGJXC2dqTk1hEWdDQDMEWTd%2FVltlFGRGQmEGDDZ%2FAQt2W3ZAR2FUX2t4Vw0yQmVEEmEBCWp%2BVF9nQmVUX3RUXGF5AF9tQWNHQm5WWmsrU1ZlQzVDRmNAQ3F%2BUVgxRmZEQWdaXjYqAF4wRGFDRzRTDWRqTk1iRTITRmEBDTcuVV0wQ2FFS2dRW2Z5Ug52KnhUEDkXASdqWF94VTMSAyRAVSg1Tk0nEicFGjkMTWlqVAtkQ2EXS29PC2YrU0JjRG0TXjNaVjdlUFltFDVBETBUVzd8QEN2FDsYHTMBGzonDCYwVW5URWVVCmV9VlkwEjcUS2QGW2Z6UVkyRzJOUSs%3D
2024-05-21 09:21:44 UTC	1456	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 33 30 32 39 38 36 2c 22 62 69 64 49 64 22 3a 22 33 30 34 66 38 65 66 66 31 37 33 32 31 37 63 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 62 69 61 63 64 73 69 64 2d 66 32 69 63 2d 6a 69 74 62 2d 6b 6d 69 6c 2d 69 63 74 6f 61 6d 74 74 74 68 74 63 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926","uqs":"","cb":1716283302986,"bidId":"304f8eff173217c2","referrer":null,"adUnitCode":"mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad","publisherId":"59ac17c192832d0011283fe3","sessionId":"",
2024-05-21 09:21:45 UTC	1041	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_3646a4db=6GQ14KXkV34YKUL75ZxMHobN0FANy4nPxUPAVp9a18zCgxpfzcuBFY%2BTig9D2QDV2p8YC4VGXhNLWteZVYGYS9ieAMEOUh7aVwyUFFuKDduGxdsS3w9WmQBBmhzZClVV2sceG1eYlEFO3x3YBUAPEsubFtuClc7fGItAQVqSXw7CGIGUG1peW4CU2lNeD0NYFcDbX9kLwcFa08vOw5hUFB7Z3d6AgA8THNtWGADAjh6NH4ADT5MfDlbYgoWdWljeAADakB7bQkwBgVrKmIvUQxsTntrXmcRGHt9Zn4GV2pBfW9aZwsAbHM2fQ4Ebhl%2BbV50HxZveTMpAgI5Gi8%2BXGRXAGx4bX0EAW9JezlJCx8WOiQgIkMXYEhnegwyQ0Z7cS4xGxcpHTgrAjldFmNpYygHAW8Zc2FGMgZXaGZifw5Qdx1zYQ97AQJgKDR7VVNsQC9sSXoRVzYlOylUQTMXJREPdAkWb3hiKQEAbk4vPQg0CwY9f2B%2BBAM8SC1gSSs%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:36:44 GMT; Secure; SameSite=None date: Tue, 21 May 2024 09:21:44 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.9	50137	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:44 UTC	638	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2746 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:44 UTC	2746	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 33 30 32 39 39 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 30 38 37 63 38 66 30 31 63 37 63 37 39 30 66 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 23 69 6e 63 Data Ascii: {"id":"1716283302997","at":1,"cur":["USD"],"imp":[{"id":"3087c8f01c7c790f","tagid":"1433179","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDL.A"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDL.A#inc
2024-05-21 09:21:44 UTC	338	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Content-Type: application/json Observe-Browsing-Topics: ?1 X-Openrtb-Version: 2.3 Date: Tue, 21 May 2024 09:21:43 GMT Transfer-Encoding: chunked Connection: close
2024-05-21 09:21:44 UTC	4962	IN	Data Raw: 31 33 35 35 0d 0a 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 33 30 32 39 39 37 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 45 46 35 43 32 41 43 31 2d 43 45 35 42 2d 34 43 41 33 2d 42 44 39 45 2d 30 45 37 32 46 41 31 44 39 37 45 41 22 2c 22 69 6d 70 69 64 22 3a 22 33 30 39 34 33 32 61 34 35 62 65 63 34 65 30 32 22 2c 22 70 72 69 63 65 22 3a 30 2e 30 38 31 32 38 37 2c 22 61 64 6d 22 3a 22 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 50 75 62 41 50 49 41 64 5c 22 20 20 69 64 3d 5c 22 45 46 35 43 32 41 43 31 2d 43 45 35 42 2d 34 43 41 33 2d 42 44 39 45 2d 30 45 37 32 46 41 31 44 39 37 45 41 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 Data Ascii: 1355{"id":"1716283302997","seatbid":[{"bid":[{"id":"EF5C2AC1-CE5B-4CA3-BD9E-0E72FA1D97EA","impid":"309432a45bec4e02","price":0.081287,"adm":"\u003cspan class=\"PubAPIAd\" id=\"EF5C2AC1-CE5B-4CA3-BD9E-0E72FA1D97EA\"\u003e\u003cscript type=\"text/javascr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.9	50253	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	683	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:45 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:44 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:45 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.9	50256	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	3067	OUT	GET /gampad/ads?pvsid=2105897831518875&correlator=265694873715438&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDA.B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90&ifi=10&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283302600&lmt=1715994881&adxs=268&adys=907&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcus [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://custommapposter.com X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-21 09:21:45 UTC	1219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6239183429 Google-Creative-Id: 138386434142 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Tue, 21 May 2024 09:21:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnwaRBcmOgnTkQ4ly_nOPla81Gx2Hdez960y7_3PzTTVEMtAsMDslAhJ93e0Lc; expires=Thu, 21-May-2026 09:21:45 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:21:45 UTC	171	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 30 38 34 32 35 37 36 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 41 2e 42 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 39 30 2c 37 32 38 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 33 38 36 34 33 34 31 34 32 5d 2c 5b 36 32 33 39 31 38 33 34 32 39 5d 2c 5b 34 39 39 36 38 37 34 33 31 34 5d 2c 5b 33 31 36 34 32 35 32 35 33 32 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: 8000{"/20842576/KJI01M/KJI01M-DDA.B":["html",1,null,null,1,90,728,0,0,null,null,null,1,null,[138386434142],[6239183429],[4996874314],[3164252532],null,null,null,null,nul
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6d 67 56 31 78 30 33 41 63 68 4c 6f 4f 65 2d 4f 56 45 67 55 49 53 4b 58 50 4c 68 68 5a 6c 38 72 44 31 76 39 49 2d 4d 51 44 45 36 31 55 4d 77 62 61 4a 31 4b 75 53 6f 34 7a 58 70 70 55 35 6e 77 31 38 47 61 55 33 65 42 63 6f 72 6d 64 32 6c 58 45 4d 30 41 6c 45 47 41 22 2c 22 43 4b 32 58 2d 63 57 31 6e 6f 59 44 46 56 47 57 67 77 63 64 2d 4c 4d 43 5f 41 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: l,null,null,1,null,null,null,null,null,null,"AOrYGsmgV1x03AchLoOe-OVEgUISKXPLhhZl8rD1v9I-MQDE61UMwbaJ1KuSo4zXppU5nw18GaU3eBcormd2lXEM0AlEGA","CK2X-cW1noYDFVGWgwcd-LMC_A",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,n
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 45 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 45 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 44 28 29 3b 44 28 29 3b 78 28 22 53 61 66 61 72 69 22 29 26 26 28 44 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 Data Ascii: m"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};function E(a){E[" "](a);return a}E[" "]=function(){};!x("Android")\|\|D();D();x("Safari")&&(D()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y(
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 30 29 26 32 3f 61 3a 73 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 48 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 72 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 47 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 72 61 28 61 5b 67 Data Ascii: 0)&2?a:sa(a,b,c,void 0!==d,e);else if(H(a)){const f={};for(let g in a)f[g]=ra(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function sa(a,b,c,d,e){const f=d\|\|c?a[G]\|0:0;d=d?!!(f&32):void 0;a=Array.prototype.slice.call(a);for(let g=0;g<a.length;g++)a[g]=ra(a[g
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 3b 69 66 28 48 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 70 3d 63 3b 6c 65 74 20 6d 3d 7b 7d 2c 6c 3d 21 31 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 70 29 7b 6c 65 74 20 6e 3d 70 5b 6b 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 7b 6c 65 74 20 71 3d 6e 3b 69 66 28 4a 28 6e 2c 64 2c 2b 6b 29 7c 7c 6b 61 28 6e 29 26 26 30 3d 3d 3d 6e 2e 73 69 7a 65 29 6e 3d 6e 75 6c 6c 3b 6e 21 3d 71 26 26 28 6c 3d 21 30 29 7d 6e 75 6c 6c 21 3d 6e 3f 6d 5b 6b 5d 3d 6e 3a 6c 3d 21 30 7d 69 66 28 6c 29 7b 66 6f 72 28 76 61 72 20 68 20 69 6e 20 6d 29 7b 70 3d 6d 3b 62 72 65 61 6b 20 61 7d 70 3d 6e 75 6c 6c 7d 7d 70 21 3d 63 26 26 28 66 3d 21 30 29 3b 61 2d 2d 7d 66 6f 72 28 6b 3d 2b 21 21 28 Data Ascii: return b;let f,g;if(H(c=b[a-1])){a:{var p=c;let m={},l=!1;for(var k in p){let n=p[k];if(Array.isArray(n)){let q=n;if(J(n,d,+k)\|\|ka(n)&&0===n.size)n=null;n!=q&&(l=!0)}null!=n?m[k]=n:l=!0}if(l){for(var h in m){p=m;break a}p=null}}p!=c&&(f=!0);a--}for(k=+!!(
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 2f 5b 3f 26 5d 28 24 7c 23 29 2f 3b 20 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 73 65 61 72 63 68 28 45 61 29 2c 64 3d 30 2c 65 2c 66 3d 5b 5d 3b 30 3c 3d 28 65 3d 44 61 28 61 2c 64 2c 22 6e 69 73 22 2c 63 29 29 3b 29 66 2e 70 75 73 68 28 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2c 65 29 29 2c 64 3d 4d 61 74 68 2e 6d 69 6e 28 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 65 29 2b 31 7c 7c 63 2c 63 29 3b 66 2e 70 75 73 68 28 61 2e 73 6c 69 63 65 28 64 29 29 3b 61 3d 66 2e 6a 6f 69 6e 28 22 22 29 2e 72 65 70 6c 61 63 65 28 47 61 2c 22 24 31 22 29 3b 28 62 3d 22 6e 69 73 22 2b 28 6e 75 6c 6c 21 3d 62 3f 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 62 29 29 3a 22 22 29 29 3f Data Ascii: /[?&]($\|#)/; function Ha(a,b){for(var c=a.search(Ea),d=0,e,f=[];0<=(e=Da(a,d,"nis",c));)f.push(a.substring(d,e)),d=Math.min(a.indexOf("&",e)+1\|\|c,c);f.push(a.slice(d));a=f.join("").replace(Ga,"$1");(b="nis"+(null!=b?"="+encodeURIComponent(String(b)):""))?
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3f 62 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 76 61 72 20 56 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 67 3d 7b 7d 7d 7d 3b 76 61 72 20 55 61 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 56 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 76 61 72 20 61 3d 53 61 28 52 61 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 3d 61 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 Data Ascii: return a.defaultValue}return typeof b===typeof a.defaultValue?b:a.defaultValue}var Va=class{constructor(){this.g={}}};var Ua=class extends Va{constructor(){super();var a=Sa(Ra,document.currentScript);a=a&&a.getAttribute("data-jc-flags")\|\|"";try{const b=JS
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 61 26 26 28 54 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 5c 62 64 65 69 64 3d 28 5b 5c 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 54 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 64 62 28 61 29 7b 61 26 26 55 26 26 56 28 29 26 26 28 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 65 62 7b 63 6f 6e 73 74 Data Ascii: a&&(T=(b=a.match(/\\bdeid=([\\d,]+)/))?b[1]:"")}catch(c){}}b=T;a=!!b.indexOf&&0<=b.indexOf("1337")}return a});function db(a){a&&U&&V()&&(U.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),U.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class eb{const
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 61 2c 62 29 7b 6c 65 74 20 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 2c 64 3d 68 62 28 61 29 2d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3e 64 29 72 65 74 75 72 6e 22 22 3b 61 2e 67 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 29 3b 62 3d 6e 75 6c 6c 3b 6c 65 74 20 65 3d 22 22 3b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 61 2e 67 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 63 6f 6e 73 74 20 67 3d 61 2e 67 5b 66 5d 2c 70 3d 61 2e 69 5b 67 5d 3b 66 6f 72 28 6c 65 74 20 6b 3d 30 3b 6b 3c 70 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 69 66 28 21 64 29 7b 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 3b 62 72 65 61 6b 7d 6c 65 74 20 68 3d 66 62 Data Ascii: a,b){let c="https://pagead2.googlesyndication.com"+b,d=hb(a)-b.length;if(0>d)return"";a.g.sort(function(f,g){return f-g});b=null;let e="";for(let f=0;f<a.g.length;f++){const g=a.g[f],p=a.i[g];for(let k=0;k<p.length;k++){if(!d){b=null==b?g:b;break}let h=fb
2024-05-21 09:21:45 UTC	1390	IN	Data Raw: 6e 67 28 30 2c 35 31 32 29 3b 67 2e 67 2e 70 75 73 68 28 32 29 3b 67 2e 69 5b 32 5d 3d 57 28 22 6d 73 67 22 2c 70 29 7d 76 61 72 20 6b 3d 62 2e 6d 65 74 61 7c 7c 7b 7d 3b 62 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 62 29 7d 63 61 74 63 68 28 41 29 7b 7d 69 66 28 64 29 74 72 79 7b 64 28 62 29 7d 63 61 74 63 68 28 41 29 7b 7d 64 3d 7a 3b 6b 3d 5b 6b 5d 3b 64 2e 67 2e 70 75 73 68 28 33 29 3b 64 2e 69 5b 33 5d 3d 6b 3b 64 3d 75 3b 6b 3d 5b 5d 3b 6c 65 74 20 53 3b 62 3d 6e 75 6c 6c 3b 64 6f 7b 76 61 72 20 68 3d 64 3b 74 72 79 7b 76 61 72 20 6d 3b 69 66 28 6d 3d 21 21 68 26 26 6e 75 6c 6c 21 3d 68 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 45 28 68 2e 66 6f 6f 29 3b 20 6d 3d 21 30 3b 62 72 65 61 6b 20 62 7d Data Ascii: ng(0,512);g.g.push(2);g.i[2]=W("msg",p)}var k=b.meta\|\|{};b=k;if(this.i)try{this.i(b)}catch(A){}if(d)try{d(b)}catch(A){}d=z;k=[k];d.g.push(3);d.i[3]=k;d=u;k=[];let S;b=null;do{var h=d;try{var m;if(m=!!h&&null!=h.location.href)b:{try{E(h.foo); m=!0;break b}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.9	50255	108.138.6.136	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	538	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	516	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 167 Connection: close Server: CloudFront Date: Tue, 21 May 2024 09:20:05 GMT Location: https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js Via: 1.1 d7433132a7c6595c9aab2dc2272e7060.cloudfront.net (CloudFront), 1.1 cfbb6e543d97587a32117dbabb25fc86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: kVjkzYy2jc99x4azBLv8PwAQkPBluheO509sutOhR5OEByW3dULtCA== Age: 100
2024-05-21 09:21:45 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.9	50260	108.138.8.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	875	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=5&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Date: Tue, 21 May 2024 09:21:44 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 57eb57a4c7d431365ab5b2e18c495bf4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: suc18qpkHGYnWHIgxaMOiPT4gH6gsl5ciGS5ITJ6CWmxzNbJjq4j9Q==
2024-05-21 09:21:45 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 35 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"5"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.9	50258	108.138.6.136	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	447	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fcustommapposter.com&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	411	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 1183 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Tue, 21 May 2024 09:19:48 GMT Server: Server X-Cache: Hit from cloudfront Via: 1.1 409b27093eb36cec367cdee5f3ecf8b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: 5g6xEayg0_Eku2ifVi3MGoQRASOjzxf0i0c1j5Jgufv8cQS3_jp7XA== Age: 117
2024-05-21 09:21:45 UTC	1183	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 76 61 72 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 20 3d 20 27 41 41 58 38 52 4e 36 36 31 27 3b 5c 6e 69 66 20 28 21 77 69 6e 64 6f 77 2e 5f 5f 62 74 5f 61 6c 72 65 61 64 79 5f 69 6e 76 6f 6b 65 64 20 26 26 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 20 26 26 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 2e 63 68 61 72 41 74 28 30 29 20 21 3d 3d 20 27 25 27 29 20 7b 5c 6e 20 20 63 72 65 61 74 65 53 63 72 69 70 74 28 27 68 74 74 70 73 3a 2f 2f 62 74 6c 6f 61 64 65 72 2e 63 6f 6d 2f 74 61 67 3f 61 61 78 5f 69 64 3d 27 2b 20 62 6c 6f 63 6b 74 68 72 6f 75 67 68 50 72 6f 70 65 72 74 79 49 64 20 2b 20 27 26 75 70 61 70 69 3d 74 72 75 65 27 29 3b 5c Data Ascii: {"3pvendor":"var blockthroughPropertyId = 'AAX8RN661';\nif (!window.__bt_already_invoked && blockthroughPropertyId && blockthroughPropertyId.charAt(0) !== '%') {\n createScript('https://btloader.com/tag?aax_id='+ blockthroughPropertyId + '&upapi=true');\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.9	50261	108.138.8.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	875	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=2&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Date: Tue, 21 May 2024 09:21:44 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 5c0a79476717d213b9c559bafee1c65e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: gfAcGehzsH2GQKbuZEj-lcFEmn2KmMk1NTnFbq5LX8mC9c0rUSLyqw==
2024-05-21 09:21:45 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 32 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"2"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.9	50254	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	596	OUT	GET /content/video/css/primisslate.css HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:21:45 UTC	478	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 18365 Connection: close Vary: Accept-Encoding server: nginx date: Tue, 21 May 2024 09:21:44 GMT last-modified: Tue, 05 Dec 2023 09:00:57 GMT etag: "656ee6c9-47bd" accept-ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 987865b81ba895db5b3f56f8ae175c84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: w010qH9yG1NkgkF0JRPVjutGIrjg8ClnsY848yphrrwcQ-jChHO6wg==
2024-05-21 09:21:45 UTC	16384	IN	Data Raw: 2f 2a 21 0a 2a 20 70 72 69 6d 69 73 73 6c 61 74 65 0a 2a 20 20 20 67 69 74 68 75 62 2e 63 6f 6d 2f 70 72 65 6d 61 73 61 67 61 72 2f 70 72 69 6d 69 73 73 6c 61 74 65 0a 2a 0a 2a 2f 2f 2a 0a 20 20 20 20 41 6e 20 65 78 74 72 65 6d 65 20 43 53 53 20 72 65 73 65 74 20 73 74 79 6c 65 73 68 65 65 74 2c 20 66 6f 72 20 6e 6f 72 6d 61 6c 69 73 69 6e 67 20 74 68 65 20 73 74 79 6c 69 6e 67 20 6f 66 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 65 6c 65 6d 65 6e 74 20 61 6e 64 20 69 74 73 20 63 68 69 6c 64 72 65 6e 2e 0a 0a 20 20 20 20 62 79 20 50 72 65 6d 61 73 61 67 61 72 20 52 6f 73 65 0a 20 20 20 20 20 20 20 20 64 68 61 72 6d 61 66 6c 79 2e 63 6f 6d 0a 0a 20 20 20 20 6c 69 63 65 6e 73 65 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 Data Ascii: /! primisslate* github.com/premasagar/primisslate*// An extreme CSS reset stylesheet, for normalising the styling of a container element and its children. by Premasagar Rose dharmafly.com license opensource.org/lice
2024-05-21 09:21:45 UTC	1981	IN	Data Raw: 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 31 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 31 65 6d 20 30 3b 0a 7d 0a 2e 70 72 69 6d 69 73 73 6c 61 74 65 20 2a 5b 64 69 72 3d 72 74 6c 5d 20 7b 0a 20 20 20 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 0a 7d 0a 2e 70 72 69 6d 69 73 73 6c 61 74 65 20 6d 61 72 6b 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 39 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0a 7d Data Ascii: isplay:block; height:1px; border:0; border-top:1px solid #ccc; margin:1em 0;}.primisslate *[dir=rtl] { direction: rtl;}.primisslate mark { background-color:#ff9; color:#000000; font-style:italic; font-weight:bold;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.9	50257	108.138.6.136	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	372	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Mon, 20 May 2024 13:47:24 GMT Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8d07edb8bf98788bf512d51f8cc554f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: ks1nfHMg57jNeVNnghDlmhAO72sZD5ba5jkzO9_xvwBdDpVew8fKAQ== Age: 70462
2024-05-21 09:21:45 UTC	6396	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad
2024-05-21 09:21:45 UTC	86	IN	Data Raw: 73 79 73 74 65 6d 5c 2e 63 6f 6d 2f 2e 74 65 73 74 28 6c 29 26 26 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 70 69 78 65 6c 51 75 65 75 65 2e 66 69 72 65 50 69 78 65 6c 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6d 29 2c 6c 2c 22 22 29 7d 7d 29 7d 28 29 3b Data Ascii: system\.com/.test(l)&&amzn_aps_csm.pixelQueue.firePixel(JSON.stringify(m),l,"")}})}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.9	50264	108.138.8.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	875	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=3&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad%22%2C%22s%22%3A%5B%22160x600%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Date: Tue, 21 May 2024 09:21:45 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 dc85053069397a282d87170bb1bcab4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: iseo6Pu7glGH9JPRk78L2rpDGBiO52QIxKWIh_Bwf7qMsOYp_TnzWg==
2024-05-21 09:21:45 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 33 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"3"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.9	50259	108.138.8.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	874	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&pid=KFGONmkXywV2R&cb=4&ws=1280x907&v=24.506.1519&t=60000&slots=%5B%7B%22sd%22%3A%22mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%22%7D%5D&schain=1.0%2C1%21monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&sm=cd5d7008-992a-48f3-a544-c68fc6219f88&pubid=76b6d1d8-9f58-4ac7-a92e-f3232afccc8a&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 193 Connection: close Date: Tue, 21 May 2024 09:21:45 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 bfb5bffe90e3b0e760933a7a07d850ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: yktbuqMK0Tf73vnRtSZw1woyhAISniICrR9vr4AeQEnZSUVaCBPvwA==
2024-05-21 09:21:45 UTC	193	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 34 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain","cb":"4"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.9	50336	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	929	OUT	GET /ps/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:45 UTC	785	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:21:45 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP013 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= content-length: 0 date: Tue, 21 May 2024 09:21:45 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.9	50345	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:45 UTC	3271	OUT	GET /gampad/ads?pvsid=2105897831518875&correlator=4081099331167574&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=11&sfv=1-0-40&rcs=1&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283303844&lmt=1715994881&adxs=330&adys=1946&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=4&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2F [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://custommapposter.com X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-21 09:21:46 UTC	1201	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Tue, 21 May 2024 09:21:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkf3t8olHR_EUxNf4hTrwYC4PEPFkhlitpzMntdPttbPKRAr_J8sFUOaajViP8; expires=Thu, 21-May-2026 09:21:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:21:46 UTC	189	IN	Data Raw: 31 39 62 0d 0a 7b 22 2f 32 30 38 34 32 35 37 36 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 Data Ascii: 19b{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrY
2024-05-21 09:21:46 UTC	229	IN	Data Raw: 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 50 4f 77 71 63 61 31 6e 6f 59 44 46 58 65 6f 67 77 63 64 46 51 73 46 55 41 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5d 5d 7d 0a 0a 0d 0a Data Ascii: GslXqzWxZnMwa10HhsoG5C0a","CPOwqca1noYDFXeogwcdFQsFUA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"9",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}
2024-05-21 09:21:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.9	50350	185.64.190.78	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:46 UTC	669	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10602318&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:46 UTC	985	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157743:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1717459200%3A227_201_245_241; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 21 May 2024 09:21:45 GMT Transfer-Encoding: chunked Connection: close
2024-05-21 09:21:46 UTC	5314	IN	Data Raw: 31 34 62 35 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 6e 47 54 4b 49 56 43 74 52 4e 47 61 70 30 38 72 70 47 30 58 47 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 71 6d 61 70 3f 63 3d 32 34 30 26 74 70 3d 50 55 42 4d 26 74 70 69 64 3d 39 43 36 34 43 41 32 31 2d 35 30 41 44 Data Ascii: 14b5PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=nGTKIVCtRNGap08rpG0XGw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.9	50356	34.251.30.134	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:46 UTC	360	OUT	GET /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:46 UTC	512	IN	HTTP/1.1 400 Bad Request Date: Tue, 21 May 2024 09:21:46 GMT Content-Type: application/json Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: hb.minutemedia-prebid.com x-reason: failed to unmarshal payload x-envoy-upstream-service-time: 1 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.9	50373	52.46.143.56	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:46 UTC	473	OUT	GET /dcm?pid=06432402-c0d4-41b0-b9b9-42da4286c781&id=&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:21:46 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:21:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: TXE9TJ83X84EFMK09HVZ Set-Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 09:21:46 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 09:21:46 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:21:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.9	50378	67.202.105.33	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:46 UTC	921	OUT	GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:46 UTC	849	IN	HTTP/1.1 307 location: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=B8HSyGZMZ6oIqsqFR0893g==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Tue, 21 May 2024 09:21:46 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.9	50379	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:46 UTC	547	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://custommapposter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:46 UTC	726	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:46 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eQ22IEmczvZwLA%2FFOlJKa9IlfleqQcYwup6n4Gm%2F%2FwUhhigVa2m2E3wAoZHL%2BsgqHyCpdrzl5uR3aXc3bhwDDLbC%2BWNHzL5l60EF%2FwMMbWqlv4j8EKC5Oy09CCIOAV%2Fclm7duT6cmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737f8afe3d4361-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.9	50385	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:46 UTC	546	OUT	GET /js/infolinks_main.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:46 UTC	400	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:46 GMT Content-Type: application/javascript Content-Length: 4317 Connection: close last-modified: Sun, 19 May 2024 12:06:44 GMT etag: "10dd-618cd6b1ad2cc" Cache-Control: max-age=3600 expires: Tue, 21 May 2024 09:07:05 GMT via: 1.1 google CF-Cache-Status: HIT Age: 4481 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737f8bfe9a42a0-EWR
2024-05-21 09:21:46 UTC	969	IN	Data Raw: 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 64 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 28 63 3c 61 3f 22 22 3a 65 28 70 61 72 73 65 49 6e 74 28 63 2f 61 29 29 29 2b 28 28 63 3d 63 25 61 29 3e 33 35 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 2b 32 39 29 3a 63 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 7b 64 5b 65 28 63 29 5d 3d 6b 5b 63 5d 7c 7c 65 28 63 29 7d 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 7d 3b 77 68 69 6c 65 28 63 2d Data Ascii: eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c-
2024-05-21 09:21:46 UTC	1369	IN	Data Raw: 22 2b 70 5d 3d 74 7d 7d 7a 20 6d 28 29 7b 36 28 35 2e 75 26 26 35 2e 75 2e 31 4e 26 26 61 28 29 29 7b 36 28 21 35 2e 31 75 2e 31 68 29 7b 35 2e 31 75 2e 31 68 3d 55 2b 22 32 4b 22 2b 31 33 2e 31 45 28 31 33 2e 31 6d 28 29 2a 31 74 29 3b 35 2e 75 2e 32 4d 3d 35 2e 31 75 2e 31 68 7d 35 2e 75 2e 31 54 3d 64 2e 31 31 3b 35 2e 75 2e 31 59 3d 22 31 70 3a 2f 2f 31 79 2e 31 6c 2e 31 37 2f 31 35 2f 22 2b 64 2e 31 36 3b 37 20 69 3d 35 2e 75 2e 31 59 2b 22 2f 33 76 2e 31 35 22 3b 37 20 70 3d 35 2e 39 2e 31 6a 28 22 31 73 22 29 3b 70 2e 32 30 3d 22 32 35 2f 31 58 22 3b 70 2e 76 3d 35 2e 75 2e 76 7c 7c 69 3b 36 28 4b 26 26 4b 2e 77 29 7b 4b 5b 30 5d 2e 31 34 28 70 29 7d 78 7b 39 2e 31 62 2e 31 34 28 70 29 7d 7d 78 7b 37 20 65 3d 39 2e 31 6a 28 22 31 73 22 29 3b 65 2e Data Ascii: "+p]=t}}z m(){6(5.u&&5.u.1N&&a()){6(!5.1u.1h){5.1u.1h=U+"2K"+13.1E(13.1m()*1t);5.u.2M=5.1u.1h}5.u.1T=d.11;5.u.1Y="1p://1y.1l.17/15/"+d.16;7 i=5.u.1Y+"/3v.15";7 p=5.9.1j("1s");p.20="25/1X";p.v=5.u.v\|\|i;6(K&&K.w){K[0].14(p)}x{9.1b.14(p)}}x{7 e=9.1j("1s");e.
2024-05-21 09:21:46 UTC	1369	IN	Data Raw: 22 3f 22 29 2b 31 2c 48 5b 6a 5d 2e 76 2e 77 29 3b 50 28 54 29 7d 31 63 28 44 29 7b 7d 31 6e 7d 7d 36 28 21 64 2e 31 31 29 7b 64 2e 31 31 3d 22 31 70 3a 2f 2f 31 79 2e 31 6c 2e 31 37 2f 31 35 22 2b 63 7d 7d 7d 7d 64 2e 33 35 3d 33 38 20 33 62 28 29 2e 33 66 28 29 3b 36 28 64 2e 31 31 29 7b 36 28 4c 28 22 33 6f 22 29 26 26 32 36 29 7b 32 36 28 22 31 47 22 2c 32 2c 7a 28 65 2c 69 29 7b 36 28 69 26 26 28 65 2e 32 33 3d 3d 3d 22 33 77 22 7c 7c 65 2e 32 33 3d 3d 3d 22 32 37 22 29 29 7b 6d 28 29 7d 7d 29 7d 78 7b 6d 28 29 7d 7d 37 20 5a 3d 4c 28 22 32 38 22 29 3b 36 28 5a 29 7b 31 61 7b 37 20 68 3d 39 2e 31 6a 28 22 32 61 22 29 3b 68 2e 76 3d 22 22 3b 36 28 4b 26 26 4b 2e 77 29 7b 4b 5b 30 5d 2e 31 34 28 68 29 7d 78 7b 39 2e 31 62 2e 31 34 28 68 29 7d 32 64 28 Data Ascii: "?")+1,H[j].v.w);P(T)}1c(D){}1n}}6(!d.11){d.11="1p://1y.1l.17/15"+c}}}}d.35=38 3b().3f();6(d.11){6(L("3o")&&26){26("1G",2,z(e,i){6(i&&(e.23==="3w"\|\|e.23==="27")){m()}})}x{m()}}7 Z=L("28");6(Z){1a{7 h=9.1j("2a");h.v="";6(K&&K.w){K[0].14(h)}x{9.1b.14(h)}2d(
2024-05-21 09:21:46 UTC	610	IN	Data Raw: 68 6f 6e 65 7c 6d 69 6e 69 7c 75 63 77 65 62 7c 71 75 65 72 79 53 65 6c 65 63 74 6f 72 7c 75 73 65 72 41 67 65 6e 74 7c 6e 61 76 69 67 61 74 6f 72 7c 6d 6f 62 69 6c 65 7c 73 75 62 73 74 72 7c 75 6e 66 72 69 65 6e 64 6c 79 7c 6d 6f 62 69 6c 65 5f 6f 66 66 7c 64 65 73 6b 74 6f 70 5f 6f 66 66 7c 69 70 68 6f 6e 65 7c 32 39 35 31 30 37 7c 68 65 61 64 7c 63 6c 69 63 6b 7c 6d 6f 62 69 7c 69 70 61 64 7c 69 6e 66 6f 6c 69 6e 6b 5f 7c 70 6f 73 74 4d 65 73 73 61 67 65 7c 4a 53 4f 4e 7c 63 6f 6e 74 69 6e 75 65 7c 49 46 52 41 4d 45 7c 5f 69 66 72 61 6d 65 5f 7c 73 74 72 69 6e 67 69 66 79 7c 63 6f 6e 74 61 69 6e 65 72 5f 69 64 7c 44 45 53 54 52 4f 59 7c 69 6e 6e 65 72 57 69 64 74 68 7c 6e 6f 74 7c 65 6d 62 65 64 64 65 64 7c 61 70 69 4b 7c 63 68 61 72 73 65 74 7c 64 79 Data Ascii: hone\|mini\|ucweb\|querySelector\|userAgent\|navigator\|mobile\|substr\|unfriendly\|mobile_off\|desktop_off\|iphone\|295107\|head\|click\|mobi\|ipad\|infolink_\|postMessage\|JSON\|continue\|IFRAME\|_iframe_\|stringify\|container_id\|DESTROY\|innerWidth\|not\|embedded\|apiK\|charset\|dy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.9	50374	193.203.121.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	878	OUT	GET //pw-reset?lang=de&provider=sbbkn&callback=oevloginhttps://www.swisspass.ch//register?lang=de&provider=sbbkn&callback=oevlogin HTTP/1.1 Host: www.swisspass.ch Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
2024-05-21 09:21:47 UTC	796	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:47 GMT Server: Apache Content-Length: 4183 last-modified: Thu, 09 May 2024 22:56:19 GMT etag: "663d5493-1057" expires: Tue, 21 May 2024 09:21:46 GMT cache-control: no-cache pragma: no-cache cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 accept-ranges: bytes X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=16070400 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: same-origin Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self' Connection: close Content-Type: text/html
2024-05-21 09:21:47 UTC	4183	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 73 77 69 73 73 70 61 73 73 2e 63 68 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 Data Ascii: <!doctype html><html> <head> <meta charset="utf-8"> <base href="/"> <title>swisspass.ch</title> <meta name="mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.9	50392	85.114.159.118	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	626	OUT	GET /cookie/?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:47 UTC	482	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 21 May 2024 09:21:47 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7371380674245163148; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://rtb-csync.smartadserver.com/redir/?partnerid=49&partneruserid=7371380674245163148&gdpr=0&gdpr_consent=
2024-05-21 09:21:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.9	50394	185.89.210.46	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	1053	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAIgAigCMKjPsbIGOAJAAkgCEKjPsbIGGAE.
2024-05-21 09:21:47 UTC	1510	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=6403784576581203868&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 429716f9-5ae5-401d-b8ec-f98b75244fa1 Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.9	50408	67.202.105.32	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	964	OUT	GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 HTTP/1.1 Host: hde.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=B8HSyGZMZ6oIqsqFR0893g==
2024-05-21 09:21:47 UTC	1033	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1880 date: Tue, 21 May 2024 09:21:47 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-05-21 09:21:47 UTC	1880	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 5f 3d 31 37 31 36 32 38 33 33 30 37 33 37 37 2e 26 72 69 3d 30 30 31 35 61 30 30 30 30 33 48 6c 6a 48 79 41 41 4a 26 67 64 70 72 5f 35 38 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ssc-cms.33across.com/ps/?_=1716283307377.&ri=0015a00003HljHyAAJ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fvisitor.omnitagjs.com%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.9	50395	91.228.74.244	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:47 UTC	828	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:47 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EJgBCwHzK_ijAA; expires=Mon, 19-Aug-2024 09:21:47 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=664c67ab-6b7af-23329-93f9f; expires=Sat, 21-Jun-2025 09:21:47 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.9	50396	35.214.149.91	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	728	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:47 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 21 May 2024 09:21:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: tuuid=d808e1cc-0051-4b20-a6f8-b93610f0231b; path=/; expires=Wed, 21-May-2025 09:21:47 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716283307; path=/; expires=Wed, 21-May-2025 09:21:47 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716283307; path=/; expires=Wed, 21-May-2025 09:21:47 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716283307; path=/; expires=Wed, 21-May-2025 09:21:47 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.9	50419	193.203.121.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	749	OUT	GET /env.js?v=1715295378 HTTP/1.1 Host: www.swisspass.ch Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.swisspass.ch//pw-reset?lang=de&provider=sbbkn&callback=oevloginhttps://www.swisspass.ch//register?lang=de&provider=sbbkn&callback=oevlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AL_SESS-S=AZhQIp59!Fesl7ez37oq4ZWXAeZHGb3ak0vd4giTEAN26v2Hbt4Lkldo9ZMrPtQ9ysb2
2024-05-21 09:21:48 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:47 GMT Server: Apache Content-Length: 4380 last-modified: Thu, 09 May 2024 22:56:19 GMT etag: "663d5493-111c" expires: Wed, 21 May 2025 09:21:47 GMT cache-control: max-age=31536000 accept-ranges: bytes X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=16070400 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: same-origin Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; xr-spatial-tracking 'self' Connection: close Content-Type: application/javascript
2024-05-21 09:21:48 UTC	4380	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 69 6e 64 6f 77 29 20 7b 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 65 6e 76 20 3d 20 77 69 6e 64 6f 77 2e 5f 5f 65 6e 76 20 7c 7c 20 7b 7d 3b 0a 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 65 6e 76 3d 7b 0a 20 20 20 20 41 53 53 45 54 53 5f 44 45 50 4c 4f 59 5f 50 41 54 48 3a 20 27 68 74 74 70 73 3a 2f 2f 64 32 37 6c 61 32 6e 36 77 68 34 71 77 73 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 31 2e 31 31 2e 32 37 36 2f 27 2c 0a 20 20 20 20 53 49 54 45 5f 42 41 53 45 5f 55 52 4c 3a 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 77 69 73 73 70 61 73 73 2e 63 68 27 2c 0a 20 20 20 20 4c 4f 47 49 4e 5f 42 41 53 45 5f 55 52 4c 3a 20 27 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 73 77 69 73 73 70 61 73 73 2e 63 68 27 2c 0a 20 20 20 20 4c 4f 47 Data Ascii: (function (window) { window.__env = window.__env \|\| {}; window.__env={ ASSETS_DEPLOY_PATH: 'https://d27la2n6wh4qws.cloudfront.net/1.11.276/', SITE_BASE_URL: 'https://www.swisspass.ch', LOGIN_BASE_URL: 'https://login.swisspass.ch', LOG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.9	50424	104.19.177.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	509	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:47 UTC	815	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: Dw6K+rTuf8kOuPIEBw1QQA== Last-Modified: Thu, 16 May 2024 19:34:05 GMT x-ms-request-id: 69f2aff5-101e-005b-0c74-a84615000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 64067 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88737f927f315e6c-EWR
2024-05-21 09:21:47 UTC	554	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 Data Ascii: HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",th
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 Data Ascii: his.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f Data Ascii: oveGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 Data Ascii: name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.p
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 Data Ascii: ce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.pr
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 Data Ascii: ponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScri
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f Data Ascii: e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.o
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 Data Ascii: on,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.Ru
2024-05-21 09:21:47 UTC	1369	IN	Data Raw: 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 Data Ascii: tCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.9	50421	213.155.156.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	821	OUT	GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1 Host: d5p.de17a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:48 UTC	138	IN	HTTP/1.1 200 content-length: 35 content-type: image/gif p3p: CP=NON CURa ADMa DEVa TAIa OUR STP IND UNI COM NAV connection: close
2024-05-21 09:21:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.9	50439	35.186.193.173	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	813	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:48 UTC	475	IN	HTTP/1.1 200 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_bc4fd17f49e448ec9eaf4c7da6a826e4=1; path=/; domain=.ctnsnet.com; expires=Wed, 21 May 2025 09:21:48 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Tue, 21 May 2024 09:21:47 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.9	50417	82.145.213.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:47 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:48 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Tue, 21 May 2024 09:21:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0580edc5dbac4778bfc19398f495dfb8 Pragma: no-cache Set-Cookie: UID=OPU0580edc5dbac4778bfc19398f495dfb8; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-05-21 09:21:48 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 30 35 38 30 65 64 63 35 64 62 61 63 34 37 37 38 62 66 63 31 39 33 39 38 66 34 39 35 64 66 62 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0580edc5dbac4778bfc19398f495dfb8">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.9	50420	34.254.84.230	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:48 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:48 UTC	388	IN	HTTP/1.1 303 See Other Date: Tue, 21 May 2024 09:21:48 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Tue, 21 May 2024 09:31:48 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.9	50440	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:48 UTC	1115	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=6403784576581203868&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
2024-05-21 09:21:48 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 19-Aug-2024 09:21:48 GMT; path=/ Set-Cookie: PugT=1716283308; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.9	50441	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:48 UTC	1121	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
2024-05-21 09:21:48 UTC	657	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 19-Aug-2024 09:21:48 GMT; path=/ Set-Cookie: PugT=1716283308; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.9	50444	35.214.149.91	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:48 UTC	821	OUT	GET /ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d808e1cc-0051-4b20-a6f8-b93610f0231b; c=1716283307; tuuid_lu=1716283307
2024-05-21 09:21:48 UTC	786	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 21 May 2024 09:21:48 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ws.rqtrk.eu/pull?pid=6298098f-c92c-4c68-bdfc-f454f26a86ac&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D193%26user_id%3D%24BROWSER_ID%26gdpr%3D%24GDPR%26gdpr_consent%3D%24GDPR_CONSENT%26expires%3D1%26ssp%3D%24bidswitch_ssp_id&return-unstable=true&eb=&bidswitch_ssp_id=pubmatic&g=1&gdpr_pd=&gdpr=0&gdpr_consent= Set-Cookie: tuuid=d808e1cc-0051-4b20-a6f8-b93610f0231b; path=/; expires=Wed, 21-May-2025 09:21:48 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716283308; path=/; expires=Wed, 21-May-2025 09:21:48 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.9	50450	104.19.177.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:48 UTC	597	OUT	GET /consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f/e91f4b90-f9aa-4ace-891b-96dd07595d9f.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.swisspass.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:49 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:49 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 88737f999e458c2a-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 64211 Cache-Control: public, max-age=86400 Expires: Wed, 22 May 2024 09:21:49 GMT Last-Modified: Thu, 28 Mar 2024 09:02:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: TwXLYte25KFlIqy07VD1aA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a62ee14e-601e-0074-12ee-800d73000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-21 09:21:49 UTC	467	IN	Data Raw: 31 30 66 66 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 65 39 31 66 34 Data Ascii: 10ff{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"e91f4
2024-05-21 09:21:49 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 35 31 31 30 62 65 34 35 2d 66 31 38 38 2d 34 32 35 39 2d 62 33 39 39 2d 30 38 36 65 64 64 61 63 36 65 35 36 22 2c 22 4e 61 6d 65 22 3a 22 47 44 50 52 20 43 48 2d 54 72 61 66 66 69 63 20 28 4f 70 74 2d 49 6e 29 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 63 68 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 22 64 65 2d 43 48 22 2c 22 66 72 2d 43 48 22 3a 22 66 72 2d 43 48 22 2c 22 65 6e 2d 43 48 22 3a 22 65 6e 2d 43 48 22 2c 22 69 74 2d 43 48 22 3a 22 69 74 2d 43 48 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c Data Ascii: ":[{"Id":"5110be45-f188-4259-b399-086eddac6e56","Name":"GDPR CH-Traffic (Opt-In)","Countries":["ch"],"States":{},"LanguageSwitcherPlaceholder":{"default":"de-CH","fr-CH":"fr-CH","en-CH":"en-CH","it-CH":"it-CH"},"BannerPushesDown":false,"Default":false,"Gl
2024-05-21 09:21:49 UTC	1369	IN	Data Raw: 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d 22 2c 22 6d 6e 22 2c 22 6d 6f 22 2c 22 6d 70 22 2c 22 6d 72 22 2c 22 6d 73 22 2c 22 6d 75 22 2c 22 6d 76 22 2c 22 6d 77 22 2c 22 6d 78 22 2c 22 6d 79 22 2c 22 6d 7a 22 2c 22 6e 61 22 2c 22 6e 63 22 2c 22 6e 65 22 2c 22 6e 66 22 2c 22 6e 67 22 2c 22 6e 69 22 2c 22 6e 70 22 2c 22 6e 72 22 2c 22 6e 75 22 2c 22 6e 7a 22 2c 22 6f 6d 22 2c 22 70 61 22 2c 22 70 65 22 2c 22 70 66 22 2c 22 70 67 22 2c 22 70 68 22 2c Data Ascii: "kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","me","mg","mh","mk","ml","mm","mn","mo","mp","mr","ms","mu","mv","mw","mx","my","mz","na","nc","ne","nf","ng","ni","np","nr","nu","nz","om","pa","pe","pf","pg","ph",
2024-05-21 09:21:49 UTC	1154	IN	Data Raw: 22 32 30 32 34 2d 30 33 2d 32 38 54 30 39 3a 30 32 3a 30 38 2e 36 33 35 31 30 32 34 33 38 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 33 2d 32 38 54 30 39 3a 30 32 3a 30 38 2e 36 33 35 31 30 37 36 36 38 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 Data Ascii: "2024-03-28T09:02:08.635102438","updatedTime":"2024-03-28T09:02:08.635107668","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.or
2024-05-21 09:21:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.9	50448	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	1109	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0580edc5dbac4778bfc19398f495dfb8 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
2024-05-21 09:21:49 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 04-Jun-2024 09:21:49 GMT; path=/ Set-Cookie: PugT=1716283309; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:49 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.9	50453	104.18.24.173	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:49 UTC	943	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 21 May 2024 09:21:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 67 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpci6ejBNUFrUUXJKU8ELSmOfO; path=/; domain=.tribalfusion.com; expires=Mon, 19-Aug-2024 09:21:49 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aUnoeUON6Ju8ZbUxpci6ejBNUFrUUXJKU8ELSmOfO; path=/; domain=.tribalfusion.com; expires=Mon, 19-Aug-2024 09:21:49 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737f9b9ae20f85-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:49 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-05-21 09:21:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.9	50449	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	1093	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5140084931246551630 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15
2024-05-21 09:21:49 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-5140084931246551630; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 19-Aug-2024 09:21:48 GMT; path=/ Set-Cookie: PugT=1716283308; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.9	50454	34.254.84.230	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-05-21 09:21:49 UTC	789	IN	HTTP/1.1 303 See Other Date: Tue, 21 May 2024 09:21:49 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFKcTNrN01tTThBQUJUMGx6VllRZw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAJq3k7MmM8AABT0lzVYQg; Domain=bidr.io; expires=Fri, 20 Jun 2025 05:21:49 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Fri, 20 Jun 2025 05:21:49 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.9	50456	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	1036	OUT	GET /cs/cookiesync/pubmatic?channeluid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: s.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=
2024-05-21 09:21:49 UTC	793	IN	HTTP/1.1 204 No Content Server: openresty Date: Tue, 21 May 2024 09:21:49 GMT Set-Cookie: st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; Max-Age=31104000; Domain=.seedtag.com; Path=/; Expires=Fri, 16 May 2025 09:21:49 GMT; Secure; SameSite=None Set-Cookie: st_csd=1716283309626:1716283309626; Max-Age=31104000; Domain=.seedtag.com; Path=/; Expires=Fri, 16 May 2025 09:21:49 GMT; Secure; SameSite=None Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.9	50455	57.129.18.121	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	983	OUT	GET /pull?pid=6298098f-c92c-4c68-bdfc-f454f26a86ac&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D193%26user_id%3D%24BROWSER_ID%26gdpr%3D%24GDPR%26gdpr_consent%3D%24GDPR_CONSENT%26expires%3D1%26ssp%3D%24bidswitch_ssp_id&return-unstable=true&eb=&bidswitch_ssp_id=pubmatic&g=1&gdpr_pd=&gdpr=0&gdpr_consent= HTTP/1.1 Host: ws.rqtrk.eu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:49 UTC	552	IN	HTTP/1.1 302 Found server: istio-envoy date: Tue, 21 May 2024 09:21:49 GMT content-length: 0 p3p: CP="NOI DSP COR DEVa PSAa PSDa OUR BUS UNI COM NAV STA" cache-control: no-cache,private pragma: no-cache expires: Tue, 21 May 2024 09:21:48 GMT set-cookie: browser_id=1:f2772510-db99-4f93-ba59-10543e3a87bf; Expires=Tue, 28 May 2024 09:21:49 GMT; Domain=.rqtrk.eu; Secure; SameSite=None location: https://x.bidswitch.net/sync?dsp_id=193&user_id=&gdpr=0&gdpr_consent=&expires=1&ssp=pubmatic x-envoy-upstream-service-time: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.9	50452	195.5.165.20	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:50 UTC	233	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: molok-76fb1fb5347d@version_1.7.3 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 1ms Date: Tue, 21 May 2024 09:21:50 GMT
2024-05-21 09:21:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.9	50459	51.178.195.217	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:49 UTC	710	OUT	GET /redir/?partnerid=80&gdpr=0&partneruserid=NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5439263188312224104
2024-05-21 09:21:49 UTC	394	IN	HTTP/1.1 200 OK content-type: image/gif date: Tue, 21 May 2024 09:21:49 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz; expires=Wed, 21 May 2025 09:21:49 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-05-21 09:21:49 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.9	50457	34.250.113.16	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	659	OUT	GET /qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:50 UTC	459	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:50 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.18.239 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&ct=y Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.9	50462	172.64.155.119	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	563	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.swisspass.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:50 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:50 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 88737fa0b9e10c82-EWR
2024-05-21 09:21:50 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.9	50463	104.18.25.173	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	918	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpci6ejBNUFrUUXJKU8ELSmOfO
2024-05-21 09:21:50 UTC	811	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aGnt6ZaoNIvapmVrCI2OCahZajDh733gxOHNSZbZbHWxQQMDJtQmMbWqv1NuIYWHyrf8Lxqf5pitbsyCjBYT0aZcGoqyxQXLf; path=/; domain=.tribalfusion.com; expires=Mon, 19-Aug-2024 09:21:50 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aGnt6ZaoNIvapmVrCI2OCahZajDh733gxOHNSZbZbHWxQQMDJtQmMbWqv1NuIYWHyrf8Lxqf5pitbsyCjBYT0aZcGoqyxQXLf; path=/; domain=.tribalfusion.com; expires=Mon, 19-Aug-2024 09:21:50 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737fa0be094264-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.9	49923	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	660	OUT	POST /api/v2 HTTP/1.1 Host: e.serverbid.com Connection: keep-alive Content-Length: 839 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:21:50 UTC	839	OUT	Data Raw: 7b 22 70 6c 61 63 65 6d 65 6e 74 73 22 3a 5b 7b 22 64 69 76 4e 61 6d 65 22 3a 22 33 33 30 36 66 64 37 31 30 31 63 63 32 34 39 61 22 2c 22 61 64 54 79 70 65 73 22 3a 5b 35 5d 2c 22 75 6e 69 74 4e 61 6d 65 22 3a 22 63 6e 73 6d 62 6c 2d 61 75 64 69 6f 2d 33 30 30 78 32 35 30 2d 73 6c 69 64 65 72 22 2c 22 75 6e 69 74 49 64 22 3a 31 30 30 34 37 2c 22 73 69 74 65 49 64 22 3a 32 30 30 30 30 33 33 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 39 39 36 39 2c 22 7a 6f 6e 65 49 64 73 22 3a 5b 32 30 30 35 30 32 34 5d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 6e 75 6c 6c 7d 5d 2c 22 74 69 6d 65 22 3a 31 37 31 36 32 38 33 33 30 38 39 32 33 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f Data Ascii: {"placements":[{"divName":"3306fd7101cc249a","adTypes":[5],"unitName":"cnsmbl-audio-300x250-slider","unitId":10047,"siteId":2000033,"networkId":9969,"zoneIds":[2005024],"bidfloor":null}],"time":1716283308923,"url":"https://custommapposter.com/article/top/
2024-05-21 09:21:50 UTC	535	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: application/json content-length: 16 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:21:50 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:21:50 GMT connection: close
2024-05-21 09:21:50 UTC	16	IN	Data Raw: 7b 22 64 65 63 69 73 69 6f 6e 73 22 3a 7b 7d 7d Data Ascii: {"decisions":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.9	50461	80.77.87.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	815	OUT	GET /e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D130%26partneruserid%3D%5BUID%5D%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BGDPR_CONSENT%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cs.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:50 UTC	619	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 21 May 2024 09:21:50 GMT Content-Length: 0 Connection: close Set-Cookie: admtr=3d12ee56-7200-483f-ad58-25321367cbba; path=/; domain=.admanmedia.com; expires=Tue, 04 Jun 2024 09:03:37 GMT;SameSite=None;Secure Set-Cookie: ac_r=CS159; path=/; domain=.admanmedia.com; expires=Tue, 04 Jun 2024 09:03:37 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=130&partneruserid=3d12ee56-7200-483f-ad58-25321367cbba&gdpr=0&gdpr_consent=[GDPR_CONSENT]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.9	50460	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	828	OUT	GET /csync/RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DNEXXEN%26ttl%3D720%26uid%3D146e9da1fca8f0ce5e1ef0b5909cc4cd%26visitor%3DRX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:50 UTC	631	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:21:50 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%7D; path=/; expires=Wed, 21 May 2025 09:21:50 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://visitor.omnitagjs.com/visitor/sync?name=NEXXEN&ttl=720&uid=146e9da1fca8f0ce5e1ef0b5909cc4cd&visitor=RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 etag: RX8049d3ed2f50405b8cd5dc9be6476848003 connection: close
2024-05-21 09:21:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.9	50466	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	1511	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283308687&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%23incontent-1&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:21:50 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:21:50 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:21:50 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:21:50 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.9	50471	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1008 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAIgAigCMKjPsbIGOAJAAkgCEKjPsbIGGAE.
2024-05-21 09:21:50 UTC	1008	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 33 31 38 61 65 32 39 39 37 37 61 34 66 66 33 61 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 67 70 69 64 22 3a 22 2f Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"318ae29977a4ff3a","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"gpid":"/
2024-05-21 09:21:51 UTC	1592	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 18869 Connection: close Vary: Accept-Encoding Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 781c7d00-924f-44b3-8aa3-2746c55e263b Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:50 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChkI__eVARAKGAMgAygDMK7PsbIGOANAA0gDEK7PsbIGGAI.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:50 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:50 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:50 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:21:51 UTC	14792	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 33 31 38 61 65 32 39 39 37 37 61 34 66 66 33 61 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 39 30 36 37 37 37 31 35 36 35 33 37 36 35 34 32 39 37 32 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 73 33 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 26 65 3d 77 71 54 5f 33 51 4c 66 47 4b 42 66 44 41 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"318ae29977a4ff3a","tag_id":32542723,"auction_id":"9067771565376542972","nobid":false,"no_ad_url":"https://ams3-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&e=wqT_3QLfGKBfDA
2024-05-21 09:21:51 UTC	4077	IN	Data Raw: 41 59 41 77 51 59 41 41 41 41 41 41 41 44 77 50 39 41 47 71 53 58 61 42 68 59 4b 45 41 41 41 43 55 63 52 41 57 41 51 41 42 67 41 34 41 59 42 38 67 61 48 41 51 6a 45 36 6e 34 53 67 41 46 6c 65 46 4a 4d 57 57 78 76 49 58 54 59 52 45 46 42 61 30 4e 43 55 55 56 4a 63 31 39 31 61 45 52 43 52 45 4e 35 63 47 74 45 52 31 41 7a 51 6a 46 6e 54 57 64 43 65 57 64 42 55 56 42 78 51 33 56 33 62 45 6b 77 54 6d 31 32 52 47 78 44 4e 56 4a 73 61 6e 4a 4d 62 6e 56 64 47 45 46 42 53 47 64 42 5a 31 45 64 45 45 78 4a 5a 30 4a 42 53 6b 46 43 51 55 70 76 51 6b 46 6e 5a 30 46 78 51 55 56 42 63 79 34 67 41 46 42 42 4c 69 36 41 42 77 47 49 42 77 43 67 42 77 48 49 42 38 6e 31 42 64 49 48 44 51 6b 4a 72 41 51 7a 51 41 47 73 44 4e 6f 48 42 67 67 4a 74 66 51 64 41 51 63 41 36 67 63 43 Data Ascii: AYAwQYAAAAAAADwP9AGqSXaBhYKEAAACUcRAWAQABgA4AYB8gaHAQjE6n4SgAFleFJMWWxvIXTYREFBa0NCUUVJc191aERCREN5cGtER1AzQjFnTWdCeWdBUVBxQ3V3bEkwTm12RGxDNVJsanJMbnVdGEFBSGdBZ1EdEExJZ0JBSkFCQUpvQkFnZ0FxQUVBcy4gAFBBLi6ABwGIBwCgBwHIB8n1BdIHDQkJrAQzQAGsDNoHBggJtfQdAQcA6gcC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.9	50484	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3177 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=4_1716283291_1716283304
2024-05-21 09:21:50 UTC	3177	OUT	Data Raw: 7b 22 61 22 3a 22 37 31 30 33 31 36 65 39 2d 34 66 39 63 2d 34 65 35 37 2d 38 61 34 33 2d 61 30 65 32 35 62 33 30 66 33 65 30 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 33 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 33 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"710316e9-4f9c-4e57-8a43-a0e25b30f3e0","B":0,"b":"custommapposter.com","brc":3,"bwc":0,"trc":3,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:21:50 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:21:50 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=5_1716283291_1716283310; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:21:50 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:21:50 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 4f 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4e 7a 45 77 4d 7a 45 32 5a 54 6b 74 4e 47 59 35 59 79 30 30 5a 54 55 33 4c 54 68 68 4e 44 4d 74 59 54 42 6c 4d Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgOIA5vPsbIGqAM06gMkNzEwMzE2ZTktNGY5Yy00ZTU3LThhNDMtYTBlM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.9	50494	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:50 UTC	1165	OUT	GET /ps/?_=1716283307377.&ri=0015a00003HljHyAAJ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:21:50 UTC	680	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:21:50 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000A server: 33XP018 location: https://visitor.omnitagjs.com/visitor/sync?name=33ACROSS&ttl=720&uid=2f9442d7df2189f76c8b593d5f54ce95&visitor=212615153490303&gdpr=0&gdpr_consent= content-length: 0 date: Tue, 21 May 2024 09:21:50 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.9	50495	104.19.177.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:51 UTC	522	OUT	GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:51 UTC	815	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: s7qm2vbmUNglr6Jt5k9KHA== Last-Modified: Thu, 21 Mar 2024 07:04:35 GMT x-ms-request-id: f463857b-001e-005d-3a08-7c3307000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 55242 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88737fa67df172b6-EWR
2024-05-21 09:21:51 UTC	554	IN	Data Raw: 37 63 37 31 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 33 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c71/** * onetrust-banner-sdk * v202403.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return ne
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function F(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 63 65 6f 66 20 6a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 58 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 57 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof j)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void X((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){W(t,e)}var n,r}function W(e,t){e._state=2,e._value=t,J(e)}function J(e){2===e._state&&0==
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 6a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6a 3f 74 3a 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 6a 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},j.resolve=function(t){return t&&"object"==typeof t&&t.constructor===j?t:new j(function(e){e(t)})},j.reject=function(o){return new j(function(e,t){t(o)})},j.race=func
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 51 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Q.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 5a 3d 5a 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 5d 3d Data Ascii: e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=Z=Z\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=ee=ee\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=te=te\|\|{})[e.Purpose=1]=
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 70 65 3d 70 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 5b Data Ascii: ]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=pe=pe\|\|{}).Active="1",e.InActive="0",(e=he=he\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ge=ge\|\|{})[
2024-05-21 09:21:51 UTC	1369	IN	Data Raw: 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e Data Ascii: anted="granted",e.denied="denied",0,(e=Ae=Ae\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Ie=Ie\|\|{}).cookies="cookies",e.vendors="vendors",(e=Le=Le\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GEN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.9	50496	51.178.195.217	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:51 UTC	793	OUT	GET /redir/?issi=1&partnerid=130&partneruserid=3d12ee56-7200-483f-ad58-25321367cbba&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz
2024-05-21 09:21:51 UTC	435	IN	HTTP/1.1 200 OK content-type: image/gif date: Tue, 21 May 2024 09:21:51 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz\|130:3d12ee56-7200-483f-ad58-25321367cbba; expires=Wed, 21 May 2025 09:21:51 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-05-21 09:21:51 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.9	50500	34.250.113.16	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:51 UTC	685	OUT	GET /qmap?c=240&tp=PUBM&tpid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&ct=y HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-05-21 09:21:51 UTC	694	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:51 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.20.222 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 15-Feb-2025 09:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=cab47f16c678ed5c04327e9ded2ab718;Path=/;Domain=crwdcntrl.net;Expires=Sat, 15-Feb-2025 09:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-21 09:21:51 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.9	50502	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:52 UTC	993	OUT	GET /visitor/sync?name=33ACROSS&ttl=720&uid=2f9442d7df2189f76c8b593d5f54ce95&visitor=212615153490303&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:52 UTC	465	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: image/gif expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:52 GMT content-length: 49 x-envoy-upstream-service-time: 5 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:52 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 ff ff ff ff ff ff fe 01 02 00 00 00 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.9	50503	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:52 UTC	1427	OUT	GET /pcs/view?xai=AKAOjsufb617vlmobJcLo5Zq2eHIrx1qN5YMsuveqgc75OV2Xw01ZpBuCkMcPFR3jzR-5R5mk4jq8WmJPD8Q9LvgL80FX3L0cM1_rXyc4ekgfBTeeoA_h9uytObUt4CERqY-PyBva9aMymqigrYWqLedeWAgmz5JKRqUEbx9OqHCZkKcPMmf1M62HYit2tmodPgmK_4pZBDujtuVq1Ljf3lOdMyYPDkyVaqZkGKQNL2705VaE_2BTRa6madFhcMK_T1xHodNKCBj4Fgpx4Y6qVJlG04DnElSlm-APfuLOtnE9q7dvtsUK_vYMhN08QhAJjFGaBKftS62hJiyCj8qb109u382j-1QDF7Fl4um4Y4nypyzL49qSIRT_My715mZxoBvs1c4f36P2W6f3GuEtRjgzI9LGc2mFZkhGoDQMg&sai=AMfl-YQ7_kfQySj5xVt44wMv3JGSsLYmQfn5oh03-OsgwgzCd8dU061jLzznzzqA8Qf6qXyQAQI9vSf6kcF_CX7ZlWHqLJv_ePjSeySFyaYvQslsKM4zT_H3xUqD8HmOyZHpHaKs9MZerJDXp4O_3-bHJg&sig=Cg0ArKJSzCIOKboenOUSEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkf3t8olHR_EUxNf4hTrwYC4PEPFkhlitpzMntdPttbPKRAr_J8sFUOaajViP8
2024-05-21 09:21:52 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Tue, 21 May 2024 09:21:52 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.9	50508	3.75.62.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:52 UTC	850	OUT	GET /ups/58350/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:52 UTC	553	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:52 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58350/sync?redir=true&verify=true Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; Expires=Wed, 21 May 2025 15:21:52 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.9	50510	104.19.177.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:52 UTC	603	OUT	GET /consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f/ba92dbb5-02d7-443f-8481-b67e4427328b/de-ch.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.swisspass.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:52 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:52 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 88737faeaa83c431-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 64214 Cache-Control: public, max-age=86400 Expires: Wed, 22 May 2024 09:21:52 GMT Last-Modified: Thu, 28 Mar 2024 09:02:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: +HL0CijukRj/xJMmHPLzjA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 78f883b5-e01e-00a3-75d1-9b5332000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-21 09:21:52 UTC	467	IN	Data Raw: 37 63 31 62 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 4a 61 68 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 4a 61 68 72 65 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 45 69 6e 69 67 65 20 53 65 6b 75 6e 64 65 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 6f 63 68 65 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 6f 63 68 65 6e 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 4f 68 6e 65 20 5a 75 73 74 69 6d 6d 75 6e 67 20 66 6f 72 74 66 61 68 72 65 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 44 61 74 65 6e 73 63 Data Ascii: 7c1b{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Jahr","pclifeSpanYrs":"Jahre","pclifeSpanSecs":"Einige Sekunden","pclifeSpanWk":"Woche","pclifeSpanWks":"Wochen","pccontinueWithoutAcceptText":"Ohne Zustimmung fortfahren","MainText":"Datensc
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 6f 6e 65 6e 20 c3 bc 62 65 72 20 53 69 65 2c 20 49 68 72 65 20 45 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 20 6f 64 65 72 20 49 68 72 20 47 65 72 c3 a4 74 20 68 61 6e 64 65 6c 6e 2e 20 4d 65 69 73 74 20 77 65 72 64 65 6e 20 64 69 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 76 65 72 77 65 6e 64 65 74 2c 20 75 6d 20 64 69 65 20 65 72 77 61 72 74 75 6e 67 73 67 65 6d c3 a4 c3 9f 65 20 46 75 6e 6b 74 69 6f 6e 20 64 65 72 20 57 65 62 73 69 74 65 20 7a 75 20 67 65 77 c3 a4 68 72 6c 65 69 73 74 65 6e 2e 20 44 75 72 63 68 20 64 69 65 73 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 77 65 72 64 65 6e 20 53 69 65 20 6e 6f 72 6d 61 6c 65 72 77 65 69 73 65 20 6e 69 63 68 74 20 64 69 72 65 6b 74 20 69 64 65 6e 74 69 66 69 7a 69 65 72 74 2e 20 44 61 64 75 72 63 68 20 Data Ascii: onen ber Sie, Ihre Einstellungen oder Ihr Gert handeln. Meist werden die Informationen verwendet, um die erwartungsgeme Funktion der Website zu gewhrleisten. Durch diese Informationen werden Sie normalerweise nicht direkt identifiziert. Dadurch
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 6e 20 7a 75 20 75 6e 74 65 72 73 74 c3 bc 74 7a 65 6e 2e 20 3c 61 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 77 69 73 73 70 61 73 73 2e 63 68 2f 64 61 74 65 6e 73 63 68 75 74 7a 3e 44 61 74 65 6e 73 63 68 75 74 7a 65 72 6b 6c c3 a4 72 75 6e 67 3c 2f 61 3e 22 2c 22 41 6c 65 72 74 43 6c 6f 73 65 54 65 78 74 22 3a 22 53 63 68 6c 69 65 c3 9f 65 6e 22 2c 22 41 6c 65 72 74 4d 6f 72 65 49 6e 66 6f 54 65 78 74 22 3a 22 45 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 20 76 65 72 77 61 6c 74 65 6e 22 2c 22 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 45 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 20 76 65 72 77 61 6c 74 65 6e 22 2c 22 41 6c 65 72 74 41 6c 6c 6f 77 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 41 6b 7a 65 70 74 69 65 72 65 Data Ascii: n zu untersttzen. <a href=https://www.swisspass.ch/datenschutz>Datenschutzerklrung</a>","AlertCloseText":"Schlieen","AlertMoreInfoText":"Einstellungen verwalten","CookieSettingButtonText":"Einstellungen verwalten","AlertAllowCookiesText":"Akzeptiere
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 69 65 74 65 72 2d 43 6f 6f 6b 69 65 73 2c 20 77 65 6c 63 68 65 20 76 6f 6e 20 65 69 6e 65 72 20 61 6e 64 65 72 65 6e 20 44 6f 6d c3 a4 6e 65 20 61 6c 73 20 64 69 65 20 64 65 72 20 76 6f 6e 20 49 68 6e 65 6e 20 62 65 73 75 63 68 74 65 6e 20 57 65 62 73 69 74 65 20 73 74 61 6d 6d 65 6e 2e 20 57 69 65 20 76 65 72 77 65 6e 64 65 6e 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 7a 75 72 20 55 6e 74 65 72 73 74 c3 bc 74 7a 75 6e 67 20 75 6e 73 65 72 65 72 20 57 65 72 62 65 2d 20 75 6e 64 20 4d 61 72 6b 65 74 69 6e 67 6d 61 c3 9f 6e 61 68 6d 65 6e 2e 20 49 6e 73 62 65 73 6f 6e 64 65 72 65 20 76 65 72 77 65 6e 64 65 6e 20 77 69 72 20 43 6f 6f 6b 69 65 73 20 75 6e 64 20 61 6e 64 65 72 65 20 54 72 61 63 6b 65 72 2d 54 65 63 68 6e 6f 6c 6f 67 69 65 6e 20 66 c3 bc 72 Data Ascii: ieter-Cookies, welche von einer anderen Domne als die der von Ihnen besuchten Website stammen. Wie verwenden diese Cookies zur Untersttzung unserer Werbe- und Marketingmanahmen. Insbesondere verwenden wir Cookies und andere Tracker-Technologien fr
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 74 77 61 20 64 65 6d 20 46 65 73 74 6c 65 67 65 6e 20 49 68 72 65 72 20 44 61 74 65 6e 73 63 68 75 74 7a 65 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 2c 20 64 65 6d 20 41 6e 6d 65 6c 64 65 6e 20 6f 64 65 72 20 64 65 6d 20 41 75 73 66 c3 bc 6c 6c 65 6e 20 76 6f 6e 20 46 6f 72 6d 75 6c 61 72 65 6e 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 49 68 72 65 6e 20 42 72 6f 77 73 65 72 20 73 6f 20 65 69 6e 73 74 65 6c 6c 65 6e 2c 20 64 61 73 73 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 62 6c 6f 63 6b 69 65 72 74 20 6f 64 65 72 20 53 69 65 20 c3 bc 62 65 72 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 62 65 6e 61 63 68 72 69 63 68 74 69 67 74 20 77 65 72 64 65 6e 2e 20 45 69 6e 69 67 65 20 42 65 72 65 69 63 68 65 20 64 65 72 20 57 65 62 73 69 74 65 20 66 75 6e 6b 74 69 Data Ascii: twa dem Festlegen Ihrer Datenschutzeinstellungen, dem Anmelden oder dem Ausfllen von Formularen. Sie knnen Ihren Browser so einstellen, dass diese Cookies blockiert oder Sie ber diese Cookies benachrichtigt werden. Einige Bereiche der Website funkti
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 65 20 63 6f 6f 6b 69 65 73 20 73 74 6f 72 65 20 49 44 73 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 77 65 62 20 73 65 72 76 65 72 2e 20 54 68 65 79 20 61 72 65 20 6f 6e 6c 79 20 63 72 65 61 74 65 64 20 69 66 20 79 6f 75 20 6c 6f 67 69 6e 20 74 6f 20 74 68 65 20 77 65 62 73 69 74 65 2e 20 54 68 65 79 20 61 72 65 20 75 73 65 64 20 74 6f 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 73 65 73 73 69 6f 6e 2e 20 54 68 65 79 20 65 78 70 69 72 65 20 61 66 74 65 72 20 31 20 68 6f 75 72 2c 20 6f 72 20 77 68 65 6e 20 79 6f 75 20 6c 6f 67 20 6f 75 74 2c 20 77 68 69 63 68 65 76 65 72 20 69 73 20 73 6f 6f 6e 65 72 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 Data Ascii: e cookies store IDs assigned by the web server. They are only created if you login to the website. They are used to manage your session. They expire after 1 hour, or when you log out, whichever is sooner.","DurationType":1,"category":null,"isThirdParty":f
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 20 69 6d 20 42 65 6e 75 74 7a 65 72 62 72 6f 77 73 65 72 20 67 65 73 65 74 7a 74 20 77 65 72 64 65 6e 2c 20 77 65 6e 6e 20 6b 65 69 6e 65 20 5a 75 73 74 69 6d 6d 75 6e 67 20 65 72 74 65 69 6c 74 20 77 69 72 64 2e 20 44 65 72 20 43 6f 6f 6b 69 65 20 68 61 74 20 65 69 6e 65 20 6e 6f 72 6d 61 6c 65 20 4c 65 62 65 6e 73 64 61 75 65 72 20 76 6f 6e 20 65 69 6e 65 6d 20 4a 61 68 72 2c 20 73 6f 20 64 61 73 73 20 7a 75 72 c3 bc 63 6b 6b 65 68 72 65 6e 64 65 20 42 65 73 75 63 68 65 72 20 61 75 66 20 64 65 72 20 57 65 62 73 69 74 65 20 69 68 72 65 20 56 6f 72 6c 69 65 62 65 6e 20 69 6e 20 45 72 69 6e 6e 65 72 75 6e 67 20 62 65 68 61 6c 74 65 6e 2e 20 53 69 65 20 65 6e 74 68 c3 a4 6c 74 20 6b 65 69 6e 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 2c 20 64 69 65 20 64 Data Ascii: im Benutzerbrowser gesetzt werden, wenn keine Zustimmung erteilt wird. Der Cookie hat eine normale Lebensdauer von einem Jahr, so dass zurckkehrende Besucher auf der Website ihre Vorlieben in Erinnerung behalten. Sie enthlt keine Informationen, die d
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 35 38 31 37 62 32 61 35 2d 66 36 33 30 2d 34 64 62 37 2d 62 39 36 37 2d 35 32 30 61 62 34 34 66 35 37 66 30 22 2c 22 4e 61 6d 65 22 3a 22 67 6c 69 64 65 5f 75 73 65 72 22 2c 22 48 6f 73 74 22 3a 22 73 65 72 76 69 63 65 2e 73 77 69 73 73 70 61 73 73 2e 63 68 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 65 6e 75 74 7a 65 72 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 Data Ascii: tion":"","DurationType":1,"category":null,"isThirdParty":false},{"id":"5817b2a5-f630-4db7-b967-520ab44f57f0","Name":"glide_user","Host":"service.swisspass.ch","IsSession":false,"Length":"0","description":"Benutzer","DurationType":1,"category":null,"isThir
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 33 62 39 2d 34 34 64 61 2d 39 30 38 37 2d 66 35 33 66 31 34 37 38 64 61 37 37 22 2c 22 4e 61 6d 65 22 3a 22 43 53 52 46 54 37 35 39 2d 53 22 2c 22 48 6f 73 74 22 3a 22 73 77 69 73 73 70 61 73 73 2e 63 68 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 63 75 72 69 74 79 20 47 61 74 65 20 43 53 52 46 20 74 6f 6b 65 6e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 65 37 35 63 39 2d 32 39 30 33 2d 37 36 62 34 2d 38 39 65 33 2d 31 37 39 36 32 63 38 66 37 35 33 34 22 2c 22 4e 61 6d 65 22 3a 22 52 65 6d 65 6d 62 Data Ascii: 3b9-44da-9087-f53f1478da77","Name":"CSRFT759-S","Host":"swisspass.ch","IsSession":true,"Length":"0","description":"Security Gate CSRF token","DurationType":1,"category":null,"isThirdParty":false},{"id":"018e75c9-2903-76b4-89e3-17962c8f7534","Name":"Rememb
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 62 31 62 62 37 31 35 39 2d 30 62 30 37 2d 34 36 39 34 2d 61 66 62 38 2d 34 65 63 63 31 62 63 39 61 65 64 35 22 2c 22 4e 61 6d 65 22 3a 22 67 6c 69 64 65 5f 73 73 6f 5f 69 64 22 2c 22 48 6f 73 74 22 3a 22 73 77 69 73 73 70 61 73 73 2e 63 68 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 36 32 36 38 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 73 74 6f 72 65 73 20 61 20 75 6e 69 71 75 65 20 49 44 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 77 65 62 20 73 65 72 76 65 72 2e 20 49 74 20 69 73 20 6f 6e 6c 79 20 63 72 65 61 74 65 Data Ascii: iption":"","PrivacyPolicy":"","Cookies":[{"id":"b1bb7159-0b07-4694-afb8-4ecc1bc9aed5","Name":"glide_sso_id","Host":"swisspass.ch","IsSession":false,"Length":"6268","description":"This cookie stores a unique ID assigned by the web server. It is only create

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.9	50511	172.67.40.173	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:52 UTC	666	OUT	GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:52 UTC	582	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:52 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://ads.pubmatic.com set-cookie: zc=46e9d76a-2f3f-4ca1-6ef6-29684e0ccd1a; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88737fafac464205-EWR
2024-05-21 09:21:52 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.9	50513	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:52 UTC	560	OUT	GET /js/1931.004-3.034/frame_content.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:52 UTC	402	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:52 GMT Content-Type: application/javascript Content-Length: 2413 Connection: close last-modified: Tue, 14 May 2024 18:57:49 GMT etag: "96d-6186e9407e9a9" Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 07:04:10 GMT via: 1.1 google CF-Cache-Status: HIT Age: 8262 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737fb0dbf142cf-EWR
2024-05-21 09:21:52 UTC	967	IN	Data Raw: 76 61 72 20 49 4c 5f 46 52 41 4d 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 70 69 64 3d 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 70 69 64 7c 7c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 70 69 64 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 77 73 69 64 3d 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 77 73 69 64 7c 7c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 77 73 69 64 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 61 64 76 74 71 3d 77 69 6e 64 6f 77 Data Ascii: var IL_FRAME=function(){var i,o;return{init:function(){var n;window.top.infolinks_pid=window.infolinks_config.pid\|\|window.top.infolinks_pid,window.top.infolinks_wsid=window.infolinks_config.wsid\|\|window.top.infolinks_wsid,window.top.infolinks_advtq=window
2024-05-21 09:21:52 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 69 6e 70 6c 61 63 65 5f 73 6c 6f 74 29 3a 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 73 6c 6f 74 73 3d 5b 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 69 6e 70 6c 61 63 65 5f 73 6c 6f 74 5d 29 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 24 69 63 65 7c 7c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 63 65 4c 6f 61 64 53 74 61 72 74 65 64 7c 7c 28 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 69 6e 69 74 46 72 6f 6d 46 72 61 6d 65 3d 21 30 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 63 65 4c 6f 61 64 53 74 61 72 74 65 64 3d 21 30 2c 28 6e 3d 77 69 6e 64 6f 77 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 74 79 70 65 3d 22 74 Data Ascii: config.inplace_slot):window.top.infolinks_slots=[window.infolinks_config.inplace_slot]),window.top.$ice\|\|window.top.iceLoadStarted\|\|(window.top.infolinks_initFromFrame=!0,window.top.iceLoadStarted=!0,(n=window.top.document.createElement("script")).type="t
2024-05-21 09:21:52 UTC	77	IN	Data Raw: 6d 65 5f 69 6e 70 6c 61 63 65 2e 6a 73 22 2c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 29 7d 29 28 29 7d 7d 7d 28 29 3b 49 4c 5f 46 52 41 4d 45 2e 69 6e 69 74 28 29 3b Data Ascii: me_inplace.js",window.document.body.appendChild(n))})()}}}();IL_FRAME.init();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.9	50515	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:53 UTC	3150	OUT	GET /gampad/ads?pvsid=2105897831518875&correlator=1557359031084804&eid=44809527%2C31083354%2C95333747%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&gdpr=0&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDL.A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=12&sfv=1-0-40&rcs=2&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283311248&lmt=1715994881&adxs=330&adys=1946&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=5&ucis=9&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2F [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://custommapposter.com X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkf3t8olHR_EUxNf4hTrwYC4PEPFkhlitpzMntdPttbPKRAr_J8sFUOaajViP8
2024-05-21 09:21:53 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Tue, 21 May 2024 09:21:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:21:53 UTC	418	IN	Data Raw: 31 39 62 0d 0a 7b 22 2f 32 30 38 34 32 35 37 36 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 4e 75 65 35 73 6d 31 6e 6f 59 44 46 66 4f 48 67 77 63 64 42 35 6b 77 53 41 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: 19b{"/20842576/KJI01M/KJI01M-DDL.A":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNue5sm1noYDFfOHgwcdB5kwSA",null,null,n
2024-05-21 09:21:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.9	50517	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:53 UTC	1143	OUT	GET /ps/?us_privacy=&ts=1716283307377.6&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:21:53 UTC	677	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:21:53 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP012 location: https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID content-length: 0 date: Tue, 21 May 2024 09:21:53 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.9	50520	104.19.177.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:53 UTC	563	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.swisspass.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:53 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:53 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: 9af959ac-a01e-006b-72c4-7ebe77000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81138 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88737fb459d24401-EWR
2024-05-21 09:21:53 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.9	50521	104.19.177.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:53 UTC	556	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.swisspass.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:53 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 389ad4a1-601e-004b-3fc4-7ec5d0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 69257 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88737fb45d5342ad-EWR
2024-05-21 09:21:53 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-05-21 09:21:53 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.9	50519	108.138.26.7	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:53 UTC	494	OUT	GET /uploads/cn1/video/users/converted/31637/video_662121c76b5c9269110138/vid664b1f85041d9344782263_thumb.jpg?cbuster=1716199311 HTTP/1.1 Host: video.primis.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:21:53 UTC	739	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 5636 Connection: close Server: nginx Date: Mon, 20 May 2024 11:38:56 GMT Last-Modified: Mon, 20 May 2024 10:04:10 GMT x-amz-server-side-encryption: AES256 ETag: "ef562e7f34ff8f50192c0787bed21189" Via: 1.1 ec22576e88e707bf58c11e0ee75d019c.cloudfront.net (CloudFront), 1.1 8109fadbc132b410ecc2c3df250d6144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 Expires: Tue, 21 May 2024 11:38:56 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2ThtOuJBukJPhgVAS_uvFeol-g4EpnrN1scTvTVAyUJJur4l0SQxuQ== Age: 78177
2024-05-21 09:21:53 UTC	5636	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 02 e0 02 d9 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.9	50523	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:53 UTC	547	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://custommapposter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:53 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:53 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sC%2F%2BTPY9S6bZDcllvKWT1bAE%2Bc7oUvU8nsbA8cAD08BczuiOp1y3Phnux6FLnkEQzhwf2HyIBath3LQJK8ITNPyXgdSyzah2FCZclvCmG3qLj3zt6onrTNucY76Nl%2BxPPRFOoGs8MQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fb76a7a6a53-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.9	50525	3.75.62.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:55 UTC	787	OUT	GET /ups/58292/sync?_origin=1&uid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk
2024-05-21 09:21:55 UTC	741	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:55 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18z8~2ijl;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 21-May-2025 09:21:55 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-8Gd5X2hE2uVKWPOiREzgYUmuO.uTv4k-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; Expires=Wed, 21 May 2025 15:21:55 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.9	50529	185.184.8.90	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:55 UTC	617	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:55 UTC	765	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:21:55 GMT vary: Accept-Encoding set-cookie: g=tKDruMoLiO40zYZiM5xR_1716283315385;Path=/;Domain=.creativecdn.com;Expires=Wed, 21-May-2025 09:21:55 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1716283315;Path=/;Domain=.creativecdn.com;Expires=Wed, 21-May-2025 09:21:55 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 21 May 2024 09:21:55 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.9	50524	76.223.111.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:55 UTC	937	OUT	GET /getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:55 UTC	727	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:55 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=929149604929207739274; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:21:55 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=929149604929207739274; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:21:55 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.9	50565	185.64.190.78	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:55 UTC	1383	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63986577&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
2024-05-21 09:21:55 UTC	1023	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157743:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1717459200%3A219_197_227_201_245_241_226; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 21 May 2024 09:21:53 GMT Content-Length: 1202 Connection: close
2024-05-21 09:21:55 UTC	1202	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 69 70 67 6c 6f 62 2e 73 65 6d 61 73 69 6f 2e 6e 65 74 2f 70 75 62 6d 61 74 69 63 2f 31 2f 69 6e 66 6f 3f 73 54 79 70 65 3d 73 79 6e 63 26 73 45 78 74 43 6f 6f 6b 69 65 49 64 3d 39 43 36 34 43 41 32 31 2d 35 30 41 44 2d 34 34 44 31 2d 39 41 41 37 2d 34 46 32 42 41 34 36 44 31 37 31 42 26 73 49 6e 69 74 69 61 74 6f 72 3d 65 78 74 65 72 6e 61 6c 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 32 31 34 26 6d 61 70 70 65 Data Ascii: PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mappe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.9	50567	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:55 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:55 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 31 35 38 32 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283311582","
2024-05-21 09:21:55 UTC	873	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:55 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=e1e60319-cc25-4d2a-9ed4-52c10638f0e8; Expires=Wed, 21 May 2025 09:21:55 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9glESLn7saWv8FdTpgBU%2FlSninZl%2Bv2Ivi1rLbvRmBzhTzGJ3COMenofkzzq%2BlqXADWglLXpn%2FIWSZtViHTwkjdsaDgX1OyKbbGluCRKZdSc0XjL%2B%2B0rGCcjkZSKQi%2Fi6JjMqJbqg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fc40d1a7c90-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:55 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.9	50568	64.227.64.62	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:55 UTC	740	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	517	IN	HTTP/1.1 302 302 Date: Tue, 21 May 2024 09:21:56 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=6a2e128f-5fcd-4584-b3bf-be195923ce8a.485497316; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:6a2e128f-5fcd-4584-b3bf-be195923ce8a&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.9	50570	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	1373	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
2024-05-21 09:21:56 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.9	50571	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	1431	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEOzOrh4jAZUZXA6KnB8RbgI&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
2024-05-21 09:21:56 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 19-Aug-2024 09:21:56 GMT; path=/ Set-Cookie: PugT=1716283316; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:56 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.9	50569	198.47.127.20	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	1296	OUT	GET /AdServer/SPug?partnerID=157743&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; chkChromeAb67Sec=1; pi=157743:2; DPSync3=1717459200%3A227_201_245_241; SyncRTB3=1717113600%3A63%7C1717459200%3A234_81_249_254_46_166_22_161_238_21_266_55_176_56_71_233_13_8_264_214_220_54_251_3%7C1717545600%3A35%7C1718841600%3A203%7C1716854400%3A223_2_15; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308
2024-05-21 09:21:56 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:54 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716283314; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:54 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.9	50572	185.89.210.46	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	1178	OUT	GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAMgAygDMK7PsbIGOANAA0gDEK7PsbIGGAI.
2024-05-21 09:21:56 UTC	1470	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=90&external_user_id=6403784576581203868 AN-X-Request-Uuid: 14fbbe1d-147d-46c0-915a-f16ec5d4043f Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:56 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:21:56 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:21:56 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.9	50573	76.223.111.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	1009	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=929149604929207739274; tluid=929149604929207739274
2024-05-21 09:21:56 UTC	674	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:56 GMT Content-Length: 0 Connection: close Location: https://ssc-cms.33across.com/ps/?us_privacy=&xi=33&xu=929149604929207739274 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=929149604929207739274; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:21:56 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=929149604929207739274; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:21:56 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.9	50574	185.184.8.90	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	683	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=tKDruMoLiO40zYZiM5xR_1716283315385; ts=1716283315
2024-05-21 09:21:56 UTC	487	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:21:56 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 21 May 2024 09:21:56 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.9	50575	185.64.190.81	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	1415	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-8Gd5X2hE2uVKWPOiREzgYUmuO.uTv4k-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203
2024-05-21 09:21:56 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:54 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716283314; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:54 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.9	50581	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 34 32 33 35 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283314235","
2024-05-21 09:21:56 UTC	861	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=46622913-7102-4b7e-9db5-59398b0dbee0; Expires=Wed, 21 May 2025 09:21:56 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WG8O8qx9AstXbdcTmcmmj522iNzCOOwQL5Qkiw%2BNEFoWNMfkQeI73cObigBXSMi3OWB32K4tcw5X5MwmTMAGl7KRMghvEuFdgUycLk9FoICnX5GSlnAZRKnpnAAvdWBJaZrPWITE1A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fc70a72c47c-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.9	50578	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 34 32 34 37 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283314247","
2024-05-21 09:21:56 UTC	871	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=8806679a-39d3-4d4f-945c-b0e8759b1675; Expires=Wed, 21 May 2025 09:21:56 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fHAS8IEDS%2FbuEHT7GdUgN14ABGZtj%2FIhhnaubpwKERTsYXYH9Qt%2B1%2BXVi7Aoe82fay%2Bc7sdGGpS6f9iBvtn7VZ0UlvrH2Rv%2Fx3sXEGFNF6y2eAj7x7BqltyrMqJnhkkMIAiV4n8kpw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fc70e494408-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.9	50582	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 31 35 38 35 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283311585","
2024-05-21 09:21:56 UTC	871	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=8f7d78c8-c1ac-4c5e-81a7-636f3a5a0c83; Expires=Wed, 21 May 2025 09:21:56 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R6dl%2F%2BstGxpoCHAlcmLyPuBCVST5vziPbGPG%2FgQUK1NYFULvHnE%2BqHf15IA%2F4wc4xAUlJZyTZMf9tyVLw%2F0qEj6qWqLIt6Jae3MjDf19Fa4eQeIjvv6JEUUMY0W1FkqE6QeM8s0xxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fc709a74358-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.9	50579	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 34 32 35 37 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283314257","
2024-05-21 09:21:56 UTC	871	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=7d2544c9-4e36-4b84-8dae-ff5fce49f2be; Expires=Wed, 21 May 2025 09:21:56 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FtLa%2BthLXHq00hpKiri6k5ZvDhdthAJVP%2BlvDWCD3RsdXfx1a3EnxdxN%2BYY5Lj0DranWqrhXZyK6Di%2F80aPROVfJCDA%2Bdm1tG2y78R%2BTamn3DY5Y5IR8VIVWPYun9VFwBKio3ApyCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fc72d11439a-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.9	50580	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 34 33 30 35 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283314305","
2024-05-21 09:21:56 UTC	869	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=83805361-91de-4a09-945f-b941e5176ccf; Expires=Wed, 21 May 2025 09:21:56 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HSRTQ9FHXGBcb%2FvldYHUmhZ%2FnoGtaJUw8ADdNli7BLJDngZOtP6GnPvASl0TeaR8v9W1nzV3pNJd5uaONDH1fO9moaqgBXyI8Vk8L%2BhO%2BoBE55eZdx1U%2FPfbs21Tr45TyBNSd4J2XA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fc7380d42ef-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.9	50587	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 34 33 30 39 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283314309","
2024-05-21 09:21:56 UTC	869	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=9d118068-668b-46f0-88c4-1b2dbe6e9fe7; Expires=Wed, 21 May 2025 09:21:56 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5HeNttZErP4xBs5kuv1jeSFWLkY%2FAHLZSgLeMNVsKSDEaIH6Pbgc3BenzPyMu%2BwIv0wUBWyOCee7fQJd2M2Vt0EU%2F%2FGEQOzTTo7TYipaoKfSaRvB3QNOIuJzHZhYA%2Fxo5KnTuAeYQw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fc80e88c323-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.9	50583	141.95.171.142	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	708	OUT	GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: green.erne.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	431	IN	HTTP/1.1 302 Found server: envoy date: Tue, 21 May 2024 09:21:56 GMT content-type: text/html content-length: 145 location: https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent x-envoy-upstream-service-time: 0 connection: close
2024-05-21 09:21:56 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.9	50590	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	550	OUT	GET /js/1931.004-3.034/ice.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	406	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: application/javascript Content-Length: 193452 Connection: close last-modified: Tue, 14 May 2024 18:57:49 GMT etag: "2f3ac-6186e9407f17a" Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 07:04:19 GMT via: 1.1 google CF-Cache-Status: HIT Age: 8257 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737fc9794842c4-EWR
2024-05-21 09:21:56 UTC	963	IN	Data Raw: 76 61 72 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 Data Ascii: var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};function _defineProperty(e,t,n){return t
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 6e 22 2c 74 68 69 73 29 3a 28 28 74 68 69 73 5b 65 5d 3d 74 29 2e 24 69 64 3d 65 2c 74 2e 24 70 61 72 65 6e 74 3d 74 68 69 73 2c 74 2e 24 72 6f 6f 74 3d 74 68 69 73 2e 24 72 6f 6f 74 29 29 7d 2c 24 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 65 2c 6f 2c 69 29 7b 24 72 6f 6f 74 26 26 21 24 72 6f 6f 74 2e 69 63 65 52 65 73 70 6f 6e 73 65 54 69 6d 65 26 26 28 24 72 6f 6f 74 2e 69 63 65 52 65 73 70 6f 6e 73 65 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 29 3b 76 61 72 20 72 2c 73 2c 61 3d 77 68 61 74 28 65 29 2c 64 3d 74 68 69 73 7c 7c 77 69 6e 64 6f 77 3b 69 66 28 21 2f 6f 62 6a 65 63 74 7c 66 75 6e 63 74 69 6f 6e 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 72 20 69 6e 20 73 3d 64 5b 6e 5d 7c 7c 28 61 3d 66 Data Ascii: n",this):((this[e]=t).$id=e,t.$parent=this,t.$root=this.$root))},$create=function t(n,e,o,i){$root&&!$root.iceResponseTime&&($root.iceResponseTime=Date.now());var r,s,a=what(e),d=this\|\|window;if(!/object\|function/.test(a))return null;for(r in s=d[n]\|\|(a=f
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 67 67 6c 79 54 72 61 63 6b 65 72 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 65 74 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 3d 65 2c 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 29 29 3a 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 7c 7c 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 28 29 2c 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 29 7c 7c 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 3d 6f 2e 75 75 69 64 28 29 2c 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 29 29 7d 2c 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 76 6f Data Ascii: gglyTracker.prototype={setSession:function(e){e?(this.session_id=e,this.setCookie(this.session_id)):this.session_id\|\|(this.session_id=this.readCookie(),this.session_id)\|\|(this.session_id=o.uuid(),this.setCookie(this.session_id))},push:function(e){var t=vo
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 4b 45 59 2b 22 3d 22 2b 65 7d 7d 2c 74 68 69 73 2e 6c 6f 67 4c 65 76 65 6c 28 29 29 7b 63 61 73 65 22 65 72 72 6f 72 22 3a 74 68 69 73 2e 77 61 72 6e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 68 69 73 2e 74 72 61 63 65 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 61 72 6e 22 3a 74 68 69 73 2e 74 72 61 63 65 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6e 66 6f 22 3a 63 61 73 65 22 74 72 75 65 22 3a 63 61 73 65 22 6c 6f 67 22 3a 62 72 65 61 6b 3b 63 61 73 65 22 6c 6f 67 67 6c 79 22 3a 63 61 73 65 20 6e 75 6c 6c 3a 28 6c 6f 67 67 6c 79 3d 6e 65 77 20 74 68 69 73 2e 6c 6f 67 67 6c 79 54 72 61 63 6b 65 72 29 2e 70 75 73 68 28 7b 6c 6f 67 67 6c 79 4b 65 79 3a 22 63 Data Ascii: KEY+"="+e}},this.logLevel()){case"error":this.warnLog=function(){},this.traceLog=function(){};break;case"warn":this.traceLog=function(){};break;case"info":case"true":case"log":break;case"loggly":case null:(loggly=new this.logglyTracker).push({logglyKey:"c
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 7c 30 3b 72 65 74 75 72 6e 28 22 78 22 3d 3d 65 3f 74 3a 33 26 74 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 7d 2c 73 65 74 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 6b 65 79 3d 74 2c 65 2e 73 65 74 53 65 73 73 69 6f 6e 28 29 2c 74 68 69 73 2e 73 65 74 49 6e 70 75 74 55 72 6c 28 65 29 7d 2c 73 65 74 54 61 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 74 61 67 3d 74 7d 2c 73 65 74 44 6f 6d 61 69 6e 50 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 75 73 65 44 6f 6d 61 69 6e 50 72 6f 78 79 3d 74 2c 74 68 69 73 2e 73 65 74 49 6e 70 75 74 55 72 6c 28 65 29 7d 2c 73 65 74 53 65 6e 64 43 6f 6e 73 6f 6c 65 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 76 61 72 20 72 3b 69 2e 73 65 6e 64 43 6f 6e Data Ascii: \|0;return("x"==e?t:3&t\|8).toString(16)})},setKey:function(e,t){e.key=t,e.setSession(),this.setInputUrl(e)},setTag:function(e,t){e.tag=t},setDomainProxy:function(e,t){e.useDomainProxy=t,this.setInputUrl(e)},setSendConsoleError:function(i,e){var r;i.sendCon
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 5f 4b 45 59 3a 22 6c 6f 67 67 6c 79 74 72 61 63 6b 69 6e 67 73 65 73 73 69 6f 6e 22 2c 4c 4f 47 47 4c 59 5f 53 45 53 53 49 4f 4e 5f 4b 45 59 5f 4c 45 4e 47 54 48 3a 22 6c 6f 67 67 6c 79 74 72 61 63 6b 69 6e 67 73 65 73 73 69 6f 6e 22 2e 6c 65 6e 67 74 68 2b 31 2c 4c 4f 47 47 4c 59 5f 50 52 4f 58 59 5f 44 4f 4d 41 49 4e 3a 22 6c 6f 67 67 6c 79 22 2c 6c 6f 67 67 6c 79 3a 6e 75 6c 6c 7d 7d 2c 21 30 29 29 2c 65 76 65 6e 74 3d 28 6c 6f 67 67 6c 79 2e 69 6e 69 74 28 29 2c 24 69 63 65 2e 76 65 72 73 69 6f 6e 46 69 6c 65 3d 22 69 63 65 22 2c 24 72 6f 6f 74 2e 24 63 72 65 61 74 65 28 22 65 76 65 6e 74 22 2c 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 6f 2c 69 3d 74 68 69 73 2e 24 72 6f 6f 74 2c 72 3d 69 2e 65 76 65 6e 74 2c 73 3d Data Ascii: _KEY:"logglytrackingsession",LOGGLY_SESSION_KEY_LENGTH:"logglytrackingsession".length+1,LOGGLY_PROXY_DOMAIN:"loggly",loggly:null}},!0)),event=(loggly.init(),$ice.versionFile="ice",$root.$create("event",{bind:function(e){var t,n,o,i=this.$root,r=i.event,s=
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 67 65 72 2e 6c 6f 67 28 61 2c 6f 29 2c 6f 2e 63 61 6c 6c 28 69 2c 72 29 7d 7d 2c 72 65 70 65 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 6f 29 7b 76 61 72 20 69 2c 72 2c 73 2c 61 2c 64 3d 74 68 69 73 2e 24 72 6f 6f 74 2c 6c 3d 64 2e 65 76 65 6e 74 2e 5f 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2c 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 64 2e 77 68 61 74 28 6e 29 3b 69 66 28 21 65 7c 7c 64 2e 65 76 65 6e 74 2e 64 69 73 61 62 6c 65 64 7c 7c 6c 26 26 6c 2e 64 69 73 61 62 6c 65 64 7c 7c 22 61 72 72 61 79 22 21 3d 64 2e 77 68 61 74 28 6c 29 7c 7c 21 74 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 64 2e 77 68 61 74 28 74 29 29 72 65 74 75 72 6e 21 31 3b 6f 26 26 22 6e 75 6d 62 65 72 22 3d 3d 64 2e 77 68 61 74 28 6f 29 7c 7c 28 6f 3d 6e 75 6c 6c 29 3b 66 6f 72 Data Ascii: ger.log(a,o),o.call(i,r)}},repeat:function(e,t,n,o){var i,r,s,a,d=this.$root,l=d.event._listeners[e],c="undefined"!=d.what(n);if(!e\|\|d.event.disabled\|\|l&&l.disabled\|\|"array"!=d.what(l)\|\|!t\|\|"number"!=d.what(t))return!1;o&&"number"==d.what(o)\|\|(o=null);for
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 22 22 3b 66 6f 72 28 74 20 69 6e 20 65 29 6e 3d 22 27 22 2b 28 6e 75 6c 6c 3d 3d 65 5b 74 5d 3f 22 6e 75 6c 6c 22 3a 65 5b 74 5d 2e 74 6f 53 74 72 69 6e 67 3f 74 68 69 73 2e 24 72 6f 6f 74 2e 75 74 69 6c 73 2e 73 74 72 69 6e 67 2e 74 72 75 6e 63 61 74 65 28 65 5b 74 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2c 35 30 2c 22 2e 2e 2e 22 29 3a 22 5b 55 6e 6b 6e 6f 77 6e 20 4f 62 6a 65 63 74 5d 22 29 2b 22 27 22 2c 6f 5b 6f 2e 6c 65 6e 67 74 68 5d 3d 5b 74 2c 6e 5d 2e 6a 6f 69 6e 28 22 3a 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 7d 2c 7b 5f 6c 69 73 74 65 6e 65 72 73 3a 7b 7d 2c 6d 73 67 73 3a 7b 6d 65 3a 22 45 72 72 6f 72 3a 20 4d 69 73 73 69 6e 67 20 65 76 65 6e 74 2e 22 2c 6d 6c 3a 22 45 72 72 6f 72 3a 20 4d 69 73 73 73 69 6e 67 20 6c Data Ascii: "";for(t in e)n="'"+(null==e[t]?"null":e[t].toString?this.$root.utils.string.truncate(e[t].toString(),50,"..."):"[Unknown Object]")+"'",o[o.length]=[t,n].join(":");return o.join(", ")}},{_listeners:{},msgs:{me:"Error: Missing event.",ml:"Error: Misssing l
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 2e 65 76 65 6e 74 2c 72 2c 21 31 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6f 2e 65 76 65 6e 74 2c 72 29 3b 76 61 72 20 6c 3d 65 2e 24 69 63 65 49 64 2c 63 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3b 63 5b 6c 5d 7c 7c 28 63 5b 6c 5d 3d 7b 7d 29 2c 63 5b 6c 5d 5b 6f 2e 65 76 65 6e 74 5d 7c 7c 28 63 5b 6c 5d 5b 6f 2e 65 76 65 6e 74 5d 3d 5b 5d 29 2c 73 2e 75 74 69 6c 73 2e 61 72 72 61 79 2e 70 75 73 68 28 63 5b 6c 5d 5b 6f 2e 65 76 65 6e 74 5d 2c 7b 6c 69 73 74 65 6e 65 72 3a 72 2c 6f 72 69 67 69 6e 61 6c 3a 6f 2e 6c 69 73 74 65 6e 65 72 7d 29 7d 72 65 74 75 72 6e 21 30 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 2c 69 3d 74 68 69 73 2e 24 Data Ascii: .event,r,!1):e.attachEvent&&e.attachEvent("on"+o.event,r);var l=e.$iceId,c=this._listeners;c[l]\|\|(c[l]={}),c[l][o.event]\|\|(c[l][o.event]=[]),s.utils.array.push(c[l][o.event],{listener:r,original:o.listener})}return!0},unbind:function(e,t,n){var o,i=this.$
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 7b 74 2e 6c 6f 67 67 65 72 2e 6c 6f 67 28 69 2c 6e 29 2c 6e 2e 63 61 6c 6c 28 6f 2c 65 29 7d 2c 65 2e 64 65 6c 61 79 29 3a 28 74 2e 6c 6f 67 67 65 72 2e 6c 6f 67 28 69 2c 6e 29 2c 6e 2e 63 61 6c 6c 28 6f 2c 65 29 29 7d 7d 2c 7b 5f 6c 69 73 74 65 6e 65 72 73 3a 7b 7d 2c 65 6c 65 6d 65 6e 74 42 69 6e 64 65 72 3a 30 2c 6d 73 67 73 3a 7b 6d 62 65 3a 22 45 72 72 6f 72 3a 20 4d 69 73 73 69 6e 67 20 6f 72 20 62 61 64 20 65 6c 65 6d 65 6e 74 2e 22 7d 7d 2c 21 31 29 2c 24 72 6f 6f 74 2e 24 63 72 65 61 74 65 28 22 6c 6f 67 67 65 72 22 2c 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 7b 6d 65 73 73 61 67 65 3a 65 2c 74 79 70 65 3a 6e 3d 6e 7c 7c 22 6c 6f 67 22 2c 74 69 6d 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: {t.logger.log(i,n),n.call(o,e)},e.delay):(t.logger.log(i,n),n.call(o,e))}},{_listeners:{},elementBinder:0,msgs:{mbe:"Error: Missing or bad element."}},!1),$root.$create("logger",{log:function(e,t,n){var o={message:e,type:n=n\|\|"log",time:(new Date).getTime

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.9	50577	54.217.19.5	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	731	OUT	GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	587	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=91c8de3e-1753-11ef-b91e-2ff1b4cceb9d; Version=1; Expires=Fri, 20-Jun-2025 09:21:56 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://cm.adgrx.com/bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.9	50586	35.204.74.118	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	826	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	991	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=E4EBEDE8CC0947CFAF5BA10844BF6E7E; Path=/; domain=simpli.fi; Expires=Thu, 22-May-25 09:21:56 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=E4EBEDE8CC0947CFAF5BA10844BF6E7E; Path=/; domain=simpli.fi; Expires=Thu, 22-May-25 09:21:56 GMT; Secure; Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:E4EBEDE8CC0947CFAF5BA10844BF6E7E&gdpr=0&gdpr_consent= Expires: Mon, 20 May 2024 09:21:56 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-21 09:21:56 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.9	50584	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	825	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-21 09:21:56 UTC	683	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:21:56 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Wed, 21 May 2025 09:21:56 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=6937324595 etag: RX8049d3ed2f50405b8cd5dc9be6476848003 connection: close
2024-05-21 09:21:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.9	50591	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	560	OUT	GET /js/1931.004-3.034/frame_inplace.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	402	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:56 GMT Content-Type: application/javascript Content-Length: 2986 Connection: close last-modified: Tue, 14 May 2024 18:57:49 GMT etag: "baa-6186e9407e9a9" Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 07:04:10 GMT via: 1.1 google CF-Cache-Status: HIT Age: 8266 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737fca1a678c3f-EWR
2024-05-21 09:21:56 UTC	967	IN	Data Raw: 76 61 72 20 49 4c 5f 46 52 41 4d 45 5f 49 4e 50 4c 41 43 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 2c 66 3b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 74 72 79 7b 76 61 72 20 6e 2c 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 69 2e 64 61 74 61 29 3b 73 77 69 74 63 68 28 65 2e 6e 61 6d 65 29 7b 63 61 73 65 22 69 73 49 63 65 41 70 69 52 65 61 64 79 22 3a 65 2e 73 6c 6f 74 2e 69 64 3d 3d 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 69 6e 70 6c 61 63 65 5f 73 6c 6f 74 2e 69 64 26 26 28 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 6e 61 6d 65 3a 22 72 65 67 Data Ascii: var IL_FRAME_INPLACE=function(){var _,f;return{init:function(){window.addEventListener("message",function(i){try{var n,e=JSON.parse(i.data);switch(e.name){case"isIceApiReady":e.slot.id==window.infolinks_config.inplace_slot.id&&(n=JSON.stringify({name:"reg
2024-05-21 09:21:56 UTC	1369	IN	Data Raw: 73 29 2c 72 3d 74 2e 77 69 64 74 68 2c 63 3d 74 2e 68 65 69 67 68 74 2c 28 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 69 64 3d 22 49 4c 5f 43 4e 54 5f 22 2b 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 69 6e 70 6c 61 63 65 5f 73 6c 6f 74 2e 69 64 2c 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 77 69 64 74 68 3a 22 2b 72 2b 22 70 78 3b 20 68 65 69 67 68 74 3a 22 2b 63 2b 22 70 78 3b 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 29 2c 77 3d 73 3d 70 2c 28 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 Data Ascii: s),r=t.width,c=t.height,(p=document.createElement("div")).id="IL_CNT_"+window.infolinks_config.inplace_slot.id,p.setAttribute("style","display: block; width:"+r+"px; height:"+c+"px;"),document.body.appendChild(p),w=s=p,(l=document.createElement("iframe"))
2024-05-21 09:21:56 UTC	650	IN	Data Raw: 65 6e 64 69 6e 67 53 68 6f 77 56 69 64 65 6f 48 69 64 65 42 61 6e 6e 65 72 3d 21 30 7d 63 61 74 63 68 28 69 29 7b 7d 7d 2c 31 65 33 2a 74 2e 69 6e 73 74 61 6e 63 65 2e 76 69 64 65 6f 50 72 65 4c 6f 61 64 42 61 6e 6e 65 72 44 75 72 61 74 69 6f 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 65 73 74 72 6f 79 49 6e 70 6c 61 63 65 22 3a 28 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 49 4c 5f 43 4e 54 5f 22 2b 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 69 6e 70 6c 61 63 65 5f 73 6c 6f 74 2e 69 64 29 29 26 26 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 73 74 6f 72 65 49 6e 70 6c Data Ascii: endingShowVideoHideBanner=!0}catch(i){}},1e3*t.instance.videoPreLoadBannerDuration);break;case"destroyInplace":(s=document.getElementById("IL_CNT_"+window.infolinks_config.inplace_slot.id))&&s.parentNode&&s.parentNode.removeChild(s);break;case"restoreInpl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.9	50592	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	1475	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:6a2e128f-5fcd-4584-b3bf-be195923ce8a&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; PugT=1716283308; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203
2024-05-21 09:21:57 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:57 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.9	50596	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:56 UTC	644	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:56 UTC	756	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 35 34 2e 30 5c 22 7d 22 2c 22 61 69 64 22 3a 22 67 72 6f 77 6d 65 22 2c 22 63 64 22 3a 22 32 34 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 64 74 6d 22 3a 22 31 37 31 36 32 38 33 33 31 35 33 30 36 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_visibility_hidden","se_pr":"{\"appVersion\":\"7.254.0\"}","aid":"growme","cd":"24","cookie":"1","cs":"UTF-8","dtm":"1716283315306","
2024-05-21 09:21:57 UTC	865	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:57 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=d2ff39cf-df6d-483b-8d34-f68dec1b2cf5; Expires=Wed, 21 May 2025 09:21:57 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KccyMlaTEV241vTehjvscLFIasCnAJywMFB%2BSm%2F0FqJhPZ3Kc6wGnmJbQMKbfFNno3p8uUCvfsns6IxOk6Jhcx9XENfMSLLQONGBJtcFH%2FBpPmodqRToMAmQ7SQ3DdKQGcQepy6QYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fcb5a724237-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:21:57 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.9	50598	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:57 UTC	946	OUT	GET /ps/?us_privacy=&xi=33&xu=929149604929207739274 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:21:57 UTC	677	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:21:57 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP002 location: https://events-ssc.33across.com/match?bidder_id=33&external_user_id=929149604929207739274&ts=1716283317&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Tue, 21 May 2024 09:21:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.9	50597	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:57 UTC	1642	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; PugT=1716283316; SPugT=1716283314
2024-05-21 09:21:57 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:57 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:57 GMT; path=/ Set-Cookie: PugT=1716283317; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:57 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.9	50618	104.22.51.98	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:57 UTC	479	OUT	GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=46e9d76a-2f3f-4ca1-6ef6-29684e0ccd1a
2024-05-21 09:21:57 UTC	431	IN	HTTP/1.1 403 Forbidden Date: Tue, 21 May 2024 09:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Tue, 21 May 2024 09:22:12 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88737fce9bb742e9-EWR
2024-05-21 09:21:57 UTC	938	IN	Data Raw: 31 35 66 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 15fe<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-05-21 09:21:57 UTC	1369	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 3b 0a 20 20 20 20 20 20 63 6f 6f 6b 69 65 45 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 77 72 61 Data Ascii: r.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert'); cookieEl.style.display = 'block'; }) }</script>...<![endif]--></head><body> <div id="cf-wra
2024-05-21 09:21:57 UTC	1369	IN	Data Raw: 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 6b 73 2e 20 54 68 65 20 61 63 74 69 6f 6e 20 79 6f 75 20 6a 75 73 74 20 70 65 72 66 6f 72 6d 65 64 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 74 68 61 74 20 63 6f 75 6c 64 20 74 72 69 67 67 65 72 20 74 68 69 73 20 62 6c 6f 63 6b 20 69 6e 63 6c 75 64 69 6e 67 20 73 75 62 6d 69 74 74 69 6e 67 20 61 20 63 65 72 74 61 69 6e 20 77 6f 72 64 20 6f 72 20 70 68 72 61 73 65 2c 20 61 20 53 51 4c 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 6d 61 6c 66 6f 72 6d 65 64 20 64 61 74 61 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p> </div> <div cl
2024-05-21 09:21:57 UTC	1369	IN	Data Raw: 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 70 Data Ascii: den">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></sp
2024-05-21 09:21:57 UTC	593	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 28 29 20 7b 76 61 72 20 5f 30 78 69 20 3d 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 20 7c 7c 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 20 28 5f 30 78 69 29 20 7b 76 61 72 20 5f 30 78 6a 20 3d 20 5f 30 78 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5f 30 78 6a 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6a 73 3b 5f 30 78 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 5f 30 78 6a 29 3b 7d 7d 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 21 3d 3d 20 27 6c 6f 61 64 69 6e 67 27 29 20 7b 68 61 Data Ascii: );function handler() {var _0xi = _0xh.contentDocument \|\| _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading') {ha
2024-05-21 09:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.9	50593	77.243.51.121	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:57 UTC	696	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:57 UTC	307	IN	HTTP/1.1 302 Found location: https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= date: Tue, 21 May 2024 09:21:56 GMT content-length: 0 routing-server-id: -1 access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.9	50599	34.117.239.71	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:57 UTC	976	OUT	GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=6403784576581203868 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:21:57 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 21 May 2024 09:21:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:57 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.9	50601	141.94.170.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:57 UTC	900	OUT	GET /?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent HTTP/1.1 Host: pixel-eu.onaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:57 UTC	700	IN	HTTP/1.1 302 Found set-cookie: cookie=93377026b74970b2; Max-Age=31536000; Expires=Wed, 21 May 2025 09:21:57 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects282=1; Max-Age=86400; Expires=Wed, 22 May 2024 09:21:57 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://pixel-eu.onaudience.com/?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253Dtk2EoAPtRYYTTaXUhTWRTahX%2526gdpr%253D0%2526gdpr_consent%253D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.9	50603	185.255.84.152	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:57 UTC	515	OUT	GET /visitor/sync?name=33ACROSS&ttl=720&uid=2f9442d7df2189f76c8b593d5f54ce95&visitor=212615153490303&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:21:57 UTC	465	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: image/gif expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:21:57 GMT content-length: 49 x-envoy-upstream-service-time: 3 server: ayl-lb-fra02 connection: close
2024-05-21 09:21:57 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 ff ff ff ff ff ff fe 01 02 00 00 00 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.9	50630	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	1958	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:E4EBEDE8CC0947CFAF5BA10844BF6E7E&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPg [TRUNCATED]
2024-05-21 09:21:58 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:58 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.9	50631	15.197.193.217	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	794	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=6937324595 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c
2024-05-21 09:21:58 UTC	510	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:21:58 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c set-cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; expires=Wed, 21 May 2025 09:21:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjMhLefxuD8PBAFOAFaC2FkY29uZHVjdG9yYAI.; expires=Wed, 21 May 2025 09:21:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-21 09:21:58 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 64 37 63 35 38 39 66 61 2d 32 34 38 62 2d 34 32 65 30 2d 38 62 63 34 2d 66 66 62 34 62 64 63 33 33 64 35 63 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 64 37 63 35 38 39 66 61 2d 32 34 38 62 2d 34 32 65 30 2d 38 62 63 34 2d 66 66 62 34 62 64 63 33 33 64 35 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c">https://sync.1rx.io/usersync/tradedesk/d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.9	50634	198.47.127.205	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	1557	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPg [TRUNCATED]
2024-05-21 09:21:58 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:57 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.9	50633	198.47.127.20	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	1555	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-8Gd5X2hE2uVKWPOiREzgYUmuO.uTv4k-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPg [TRUNCATED]
2024-05-21 09:21:58 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:57 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716283317; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:57 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.9	50636	198.47.127.205	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	1615	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEOzOrh4jAZUZXA6KnB8RbgI&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; SPugT=1716283314; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPg [TRUNCATED]
2024-05-21 09:21:58 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:57 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 19-Aug-2024 09:21:57 GMT; path=/ Set-Cookie: PugT=1716283317; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:57 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.9	50642	50.57.31.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	694	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:58 UTC	688	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 4 Set-Cookie: SEUNCY=2CF337632DB31943; Expires=Wed, 21 May 2025 09:21:58 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Tue, 21 May 2024 09:21:58 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.9	50647	34.117.239.71	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	498	OUT	GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=6403784576581203868 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:21:58 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 21 May 2024 09:21:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:21:58 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.9	50645	141.94.170.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	1045	OUT	GET /?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253Dtk2EoAPtRYYTTaXUhTWRTahX%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: pixel-eu.onaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=93377026b74970b2; done_redirects282=1
2024-05-21 09:21:58 UTC	459	IN	HTTP/1.1 302 Found set-cookie: cookie=93377026b74970b2; Max-Age=31536000; Expires=Wed, 21 May 2025 09:21:58 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://stags.bluekai.com/site/52799?id=f414d7496e1aa9b1&redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3Dtk2EoAPtRYYTTaXUhTWRTahX%26gdpr%3D0%26gdpr_consent%3D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.9	50632	52.31.50.141	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	521	OUT	GET /sync/pubmatic/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk
2024-05-21 09:21:58 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; Expires=Wed, 21 May 2025 15:21:58 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-21 09:21:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.9	50646	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	1515	OUT	GET /pcs/view?xai=AKAOjsuLc1lgE8B4gCM_kHhXccRb60TGr960cOyVatZzAnxtodLe9rXjF6x0Fe10MKGdWRkHBdz9vJTCRLQqT7j75QRJSNXROp0U38UflQ7-KNecP-YdFmkywDwhqESah0-OQQKSIsbJUd2END1G4eS6SYmSVY4um3ybrPHFiEYwmQ3B8Tn3RE7OYyAr1W16E4InfwFvnJ6fue2JMuPv_SUumAF1aGj44obIt0P14Vx8nBnRg7veSOGRF3oRfOuXF9tMmMRFFEb65DdWk7UQIw--Tem_m_n_3lruG4ENNQRBQ1vthlWC5lUDjuZFp57YL1rJGdV1Gu6WbzNTG4NzS45HnSA0BOWUl2sgByzROj5dNmmlqpJtRyy518J0bYtyHLezTnlaACv_eG_MFhBs3mlCiw&sai=AMfl-YRvKoxvag-vp-Z6F9d9ppW-5IkcVw94lvwRkBbTmp2slrr7geSp0JDgc_t4aOMggpGmggPVKfrk53zXn7DSqs7v2JqFhal4tIWxsqMmVNoAvjTndA677Kovlso3PeWmEADRdGpl3pPVWgZoVG0s3g&sig=Cg0ArKJSzD7H8NX9PKWfEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:58 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Tue, 21 May 2024 09:21:58 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 21-May-2024 09:36:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Tue, 21 May 2024 09:21:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.9	50648	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	803	OUT	GET /usync/manage?pid=3245929&wsid=0&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:59 UTC	286	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:59 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 12956 Connection: close Cache-Control: no-store p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737fd70da56a50-EWR
2024-05-21 09:21:59 UTC	1083	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 20 20 76 61 72 20 65 6e 63 55 72 6c 3d 27 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 27 3b 74 72 79 20 7b 0a 76 61 72 20 70 62 6d 52 54 42 55 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 70 62 6d 52 54 42 55 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 70 62 6d 52 54 42 55 73 79 6e 63 2e 69 64 20 3d 20 22 70 62 6d 52 54 42 55 73 79 6e 63 22 3b 0a 70 62 6d 52 54 42 55 73 79 6e 63 2e 73 74 79 Data Ascii: <!doctype html><html><head></head><body><script> var encUrl='https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926';try {var pbmRTBUsync = document.createElement('img');pbmRTBUsync.style.width = '1px';pbmRTBUsync.id = "pbmRTBUsync";pbmRTBUsync.sty
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 3b 0a 7d 20 63 61 74 63 68 28 20 65 72 72 20 29 20 7b 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 22 3b 0a 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 Data Ascii: ;} catch( err ) { console.log(err.message);}try {var sharethroughImgUsersync = document.createElement('img');sharethroughImgUsersync.style.width = '1px';sharethroughImgUsersync.id = "sharethroughImgUsersync";sharethroughImgUsersync.style.height
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 6f 78 55 73 65 72 73 79 6e 63 22 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 20 27 6e 6f 6e 65 27 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 69 64 3d 39 62 35 39 39 34 66 32 2d 30 33 35 64 2d 34 36 64 65 2d 38 63 31 32 2d 62 63 30 65 39 61 34 65 36 36 63 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 25 32 46 64 79 6e 25 Data Ascii: sync.style.width = '1px';oxUsersync.id = "oxUsersync";oxUsersync.style.height = '1px';oxUsersync.style.display = 'none';oxUsersync.src = "https://u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 79 6e 63 2f 69 6e 66 6f 6c 69 6e 6b 73 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 25 32 46 64 79 6e 25 32 46 7a 6d 6e 2d 75 73 79 6e 63 25 33 46 75 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 22 3b 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 7a 6d 6e 49 6d 67 55 73 65 72 73 79 6e 63 29 3b 0a 7d 20 63 61 74 63 68 28 20 65 72 72 20 29 20 7b 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 74 6c 69 66 74 75 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a Data Ascii: ync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__";if (document.body) document.body.appendChild(zmnImgUsersync);} catch( err ) { console.log(err.message);}try {var tliftusync = document.createElement('img');
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 20 20 27 6e 6f 6e 65 27 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 66 72 61 6d 65 55 73 65 72 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 64 65 2e 74 79 6e 74 2e 63 6f 6d 2f 64 65 62 2f 3f 6d 3d 78 63 68 26 72 74 3d 68 74 6d 6c 26 73 69 64 3d 30 30 31 30 62 30 30 30 30 32 43 70 59 68 45 41 41 56 22 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 66 72 61 6d 65 55 73 65 72 73 79 6e 63 2e 73 61 6e 64 62 6f 78 20 3d 20 27 61 6c 6c 6f 77 2d 66 6f 72 6d 73 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 27 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 72 74 79 54 68 72 Data Ascii: 'none';thirtyThreeAcrossIframeUsersync.src = "https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV";thirtyThreeAcrossIframeUsersync.sandbox = 'allow-forms allow-scripts allow-same-origin'if (document.body) document.body.appendChild(thirtyThr
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 6f 72 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 71 6f 72 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 20 27 6e 6f 6e 65 27 3b 0a 71 6f 72 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 64 6b 65 72 6e 65 6c 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 3f 7a 6f 6e 65 3d 32 30 38 39 31 32 26 74 3d 69 6d 61 67 65 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 25 32 46 64 79 6e 25 32 46 71 6f 72 61 2d 75 73 79 6e 63 25 33 46 75 69 64 25 33 44 25 37 42 55 49 44 25 37 44 22 3b 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 Data Ascii: orImgUsersync.style.height = '1px';qorImgUsersync.style.display = 'none';qorImgUsersync.src = "https://sync.adkernel.com/user-sync?zone=208912&t=image&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fqora-usync%3Fuid%3D%7BUID%7D";if (document.body) docume
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 3d 20 22 70 62 6d 53 32 53 55 73 79 6e 63 22 3b 0a 70 62 6d 53 32 53 55 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 70 62 6d 53 32 53 55 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 20 27 6e 6f 6e 65 27 3b 0a 70 62 6d 53 32 53 55 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 38 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 36 30 38 30 39 26 67 64 70 72 3d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 53 50 75 67 25 33 46 70 25 33 44 36 30 38 30 39 25 32 36 70 6d 63 25 33 44 Data Ascii: = "pbmS2SUsync";pbmS2SUsync.style.height = '1px';pbmS2SUsync.style.display = 'none';pbmS2SUsync.src = "https://image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3D
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 27 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 74 49 66 72 61 6d 65 55 73 65 72 73 79 6e 63 29 3b 0a 7d 20 63 61 74 63 68 28 20 65 72 72 20 29 20 7b 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 6d 6e 65 74 55 73 65 72 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 6d 6e 65 74 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 6d 6e 65 74 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 6d 6e 65 Data Ascii: ow-scripts allow-same-origin'if (document.body) document.body.appendChild(otIframeUsersync);} catch( err ) { console.log(err.message);}try {var mnetUsersync = document.createElement('img');mnetUsersync.style.width = '1px';mnetUsersync.id = "mne
2024-05-21 09:21:59 UTC	1369	IN	Data Raw: 6c 69 6e 6b 73 22 3b 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 6e 72 75 6c 79 55 73 65 72 73 79 6e 63 29 3b 0a 7d 20 63 61 74 63 68 28 20 65 72 72 20 29 20 7b 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 71 75 61 6e 74 73 65 72 76 65 55 73 65 72 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 71 75 61 6e 74 73 65 72 76 65 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 71 75 61 6e 74 73 65 72 76 65 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 71 75 61 6e 74 73 65 72 76 Data Ascii: links";if (document.body) document.body.appendChild(unrulyUsersync);} catch( err ) { console.log(err.message);}try {var quantserveUsersync = document.createElement('img');quantserveUsersync.style.width = '1px';quantserveUsersync.id = "quantserv
2024-05-21 09:21:59 UTC	921	IN	Data Raw: 6d 67 55 73 65 72 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 22 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d Data Ascii: mgUsersync = document.createElement('img');thirtyThreeAcrossImgUsersync.style.width = '1px';thirtyThreeAcrossImgUsersync.id = "thirtyThreeAcrossImgUsersync";thirtyThreeAcrossImgUsersync.style.height = '1px';thirtyThreeAcrossImgUsersync.style.display =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.9	50649	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	642	OUT	GET /usync/lcmanage?pid=3245929&wsid=0&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:59 UTC	302	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:58 GMT Content-Type: application/javascript;charset=ISO-8859-1 Content-Length: 282 Connection: close Cache-Control: no-store p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737fd748100f97-EWR
2024-05-21 09:21:59 UTC	282	IN	Data Raw: 74 72 79 7b 76 61 72 20 69 71 73 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 71 73 63 72 69 70 74 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 75 73 79 6e 63 2f 69 71 75 73 79 6e 63 2d 31 2e 32 39 2e 6d 69 6e 2e 6a 73 22 3b 69 71 73 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 66 62 69 70 22 2c 22 31 33 37 32 36 34 30 34 37 22 29 3b 69 71 73 63 72 69 70 74 2e 61 73 79 6e 63 20 3d 20 21 30 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 71 73 63 72 69 70 74 29 7d 63 61 74 63 68 28 Data Ascii: try{var iqscript=document.createElement("script");iqscript.src="https://resources.infolinks.com/static/usync/iqusync-1.29.min.js";iqscript.setAttribute("data-ifbip","137264047");iqscript.async = !0;document.body&&document.body.appendChild(iqscript)}catch(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.9	50650	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	675	OUT	GET /gsd?evt=afterGSD&pid=3245929&pdom=custommapposter.com&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&jsv=1931.004-3.034&_cb=17162833170010 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:21:59 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:58 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 323 Connection: close pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: max-age=0 p3p: CP="NON DSP NID OUR COR" set-cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; Domain=infolinks.com; Expires=Thu, 21-May-2026 09:21:58 GMT; Path=/; SameSite=None; Secure via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737fd74eef4231-EWR
2024-05-21 09:21:59 UTC	323	IN	Data Raw: 77 69 6e 64 6f 77 2e 24 69 63 65 2e 65 76 65 6e 74 2e 66 69 72 65 28 27 61 66 74 65 72 47 53 44 27 2c 7b 72 69 64 3a 27 64 61 63 39 31 63 65 38 2d 38 36 36 32 2d 34 38 64 34 2d 39 37 37 64 2d 36 30 61 39 30 36 66 34 33 38 64 39 27 2c 72 73 3a 27 72 74 33 30 30 37 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 27 2c 6d 61 6b 65 79 3a 27 31 39 30 66 31 35 31 37 30 66 31 30 31 33 31 32 30 66 31 30 31 36 31 34 30 65 31 30 31 36 31 30 31 37 31 33 31 39 31 32 31 38 31 30 31 39 31 38 31 34 31 33 30 65 36 39 37 33 37 30 37 33 27 2c 6d 73 3a 27 34 30 31 38 27 2c 70 72 73 3a 27 75 2c 70 27 2c 66 62 63 3a 74 72 75 65 2c 63 6b 73 3a 7b 63 75 69 64 3a 27 30 37 36 66 31 36 39 63 2d 62 34 33 30 2d 34 30 65 32 2d 39 38 35 64 2d 36 64 32 61 37 31 34 35 64 35 31 32 27 7d 2c 73 Data Ascii: window.$ice.event.fire('afterGSD',{rid:'dac91ce8-8662-48d4-977d-60a906f438d9',rs:'rt3007.infolinks.com',makey:'190f15170f1013120f1016140e101610171319121810191814130e69737073',ms:'4018',prs:'u,p',fbc:true,cks:{cuid:'076f169c-b430-40e2-985d-6d2a7145d512'},s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.9	50651	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:58 UTC	869	OUT	GET /usersync/tradedesk/d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2024-05-21 09:21:59 UTC	784	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:21:59 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 21 May 2025 09:21:59 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 connection: close
2024-05-21 09:21:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.9	50652	50.57.31.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:59 UTC	728	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=2CF337632DB31943
2024-05-21 09:21:59 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 2 Set-Cookie: SEUNCY=2CF337632DB31943; Expires=Wed, 21 May 2025 09:21:59 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 21 May 2024 09:21:59 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-05-21 09:21:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.9	50653	198.47.127.20	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:59 UTC	1716	OUT	GET /AdServer/SPug?partnerID=157743&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk [TRUNCATED]
2024-05-21 09:21:59 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:21:58 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716283318; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:21:58 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:21:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.9	50657	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:59 UTC	609	OUT	GET /static/usync/iqusync-1.29.min.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:00 UTC	402	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:21:59 GMT Content-Type: application/javascript Content-Length: 2791 Connection: close last-modified: Fri, 08 Mar 2024 10:20:03 GMT etag: "ae7-6132389067692" Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 08:29:41 GMT via: 1.1 google CF-Cache-Status: HIT Age: 3137 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737fddd8d643dc-EWR
2024-05-21 09:22:00 UTC	967	IN	Data Raw: 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 66 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 3c 64 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 64 5b 66 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 6e 65 78 74 3a 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 28 64 29 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 6d 61 6b 65 49 74 65 72 61 74 6f 72 Data Ascii: var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(d){var f=0;return function(){return f<d.length?{done:!1,value:d[f++]}:{done:!0}}};$jscomp.arrayIterator=function(d){return{next:$jscomp.arrayIteratorImpl(d)}};$jscomp.makeIterator
2024-05-21 09:22:00 UTC	1369	IN	Data Raw: 29 29 7d 29 7d 3b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 61 2e 64 65 66 65 72 3d 21 30 3b 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 61 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 69 6d 61 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 70 69 64 2e 6a 73 22 3b 61 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 5f 33 33 41 63 72 6f 73 73 50 70 Data Ascii: ))})};var c=document.getElementsByTagName("script")[0];c.parentNode.insertBefore(a,c)}function f(){var a=document.createElement("script");a.defer=!0;a.type="text/javascript";a.src="https://cdn-ima.33across.com/ppid.js";a.onload=function(){new _33AcrossPp
2024-05-21 09:22:00 UTC	455	IN	Data Raw: 61 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 49 6e 74 65 6e 74 49 71 4f 62 6a 65 63 74 28 7b 70 61 72 74 6e 65 72 3a 33 32 38 35 31 32 31 33 34 2c 74 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 3a 31 45 33 2c 73 6f 75 72 63 65 4d 65 74 61 44 61 74 61 45 78 74 65 72 6e 61 6c 3a 77 69 6e 64 6f 77 2e 69 71 69 6c 73 6f 75 72 63 65 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 65 2e 69 6c 5f 6c 73 2e 69 71 75 65 3d 62 7d 7d 29 7d 3b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 Data Ascii: a.onload=function(){new IntentIqObject({partner:328512134,timeoutInMillis:1E3,sourceMetaDataExternal:window.iqilsource,callback:function(b){e.il_ls.ique=b}})};var c=document.getElementsByTagName("script")[0];c.parentNode.insertBefore(a,c)}function m(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.9	50658	67.202.105.33	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:21:59 UTC	1223	OUT	GET /deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV HTTP/1.1 Host: de.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=B8HSyGZMZ6oIqsqFR0893g==; pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%5D
2024-05-21 09:22:00 UTC	1489	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22029cc11ae7%22%2C%22f%22%3A1%2C%22ts%22%3A1716283320038%7D%2C%7B%22p%22%3A%226f27415d53%22%2C%22f%22%3A1%2C%22ts%22%3A1716283320038%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1716283320038%7D%2C%7B%22p%22%3A%227912d88d74%22%2C%22f%22%3A1%2C%22ts%22%3A1716283320038%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%2222833ea406%22%2C%22f%22%3A1%2C%22ts%22%3A1716283320038%7D%2C%7B%22p%22%3A%22f5b8438f72%22%2C%22f%22%3A1%2C%22ts%22%3A1716283320038%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1716283307377%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1787 date: Tue, 21 May 2024 09:21:59 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-05-21 09:22:00 UTC	26	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 Data Ascii: <!doctype html><html><head
2024-05-21 09:22:00 UTC	1761	IN	Data Raw: 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 33 33 61 63 72 6f 73 73 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 37 38 33 39 30 26 76 65 72 73 69 6f 6e 3d 31 26 75 73 5f 70 72 69 76 61 63 79 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 75 73 5f 70 72 69 76 61 63 79 3d 26 74 73 3d 31 37 31 36 32 38 33 33 32 30 30 33 38 2e 32 26 72 69 3d 32 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: ></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://33across-match.dotomi.com/match/bounce/current?networkId=78390&version=1&us_privacy=","https://ssc-cms.33across.com/ps/?us_privacy=&ts=1716283320038.2&ri=2&ru=https%3A%2F%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.9	50659	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:00 UTC	671	OUT	POST /action/doq.htm?pcode=utf-8&r=17162833181361 HTTP/1.1 Host: rt3007.infolinks.com Connection: keep-alive Content-Length: 2112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:00 UTC	2112	OUT	Data Raw: 74 77 6e 75 6d 3d 30 26 6e 6f 76 3d 31 26 74 6f 6c 76 3d 31 37 31 36 32 38 33 33 31 38 31 31 35 26 6e 6f 70 3d 31 26 70 72 73 3d 75 25 32 43 70 26 63 3d 63 26 73 74 72 67 3d 74 72 75 65 26 70 69 64 3d 33 32 34 35 39 32 39 26 77 73 69 64 3d 32 33 36 38 26 6d 61 6b 65 79 3d 31 39 30 66 31 35 31 37 30 66 31 30 31 33 31 32 30 66 31 30 31 36 31 34 30 65 31 30 31 36 31 30 31 37 31 33 31 39 31 32 31 38 31 30 31 39 31 38 31 34 31 33 30 65 36 39 37 33 37 30 37 33 26 72 69 64 3d 64 61 63 39 31 63 65 38 2d 38 36 36 32 2d 34 38 64 34 2d 39 37 37 64 2d 36 30 61 39 30 36 66 34 33 38 64 39 26 70 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 Data Ascii: twnum=0&nov=1&tolv=1716283318115&nop=1&prs=u%2Cp&c=c&strg=true&pid=3245929&wsid=2368&makey=190f15170f1013120f1016140e101610171319121810191814130e69737073&rid=dac91ce8-8662-48d4-977d-60a906f438d9&purl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926
2024-05-21 09:22:00 UTC	662	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:00 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2961 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache,no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; Max-Age=63072000; Expires=Thu, 21 May 2026 09:22:00 GMT; Domain=infolinks.com; Path=/; SameSite=None P3P: CP="NON DSP NID OUR COR" Content-Language: en-US CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737fde8c5572b6-EWR
2024-05-21 09:22:00 UTC	707	IN	Data Raw: 7b 22 72 61 75 74 68 22 3a 7b 22 72 73 64 22 3a 22 5a 57 70 58 4b 63 62 59 32 50 76 7a 5f 4c 39 35 65 6e 41 6d 37 4e 77 71 64 67 55 58 37 6f 79 37 6b 50 45 61 35 4e 58 76 44 42 6b 6f 4e 4a 51 42 51 47 72 43 54 41 46 6a 6f 4f 77 7a 37 4f 67 5f 65 4b 53 62 34 49 34 34 63 69 39 4c 57 59 44 54 39 56 6b 2d 38 54 32 38 74 39 79 43 54 70 38 31 35 69 6d 43 4e 36 38 6f 79 67 57 59 55 69 45 46 65 39 49 35 6d 5a 59 35 72 4b 4b 50 61 6b 38 41 42 50 43 79 4c 36 69 70 51 64 67 4e 72 77 49 5f 36 73 53 46 59 5f 48 6e 62 4f 70 31 6f 54 72 33 4d 31 45 36 30 4b 69 51 4d 4a 34 22 2c 22 72 73 6b 22 3a 22 39 32 22 2c 22 72 63 73 22 3a 22 70 51 32 79 32 72 6d 73 71 44 54 66 43 42 69 68 6c 52 6b 75 41 67 22 7d 2c 22 73 65 6e 74 65 6e 63 65 73 22 3a 7b 22 61 70 70 73 20 66 6f 72 Data Ascii: {"rauth":{"rsd":"ZWpXKcbY2Pvz_L95enAm7NwqdgUX7oy7kPEa5NXvDBkoNJQBQGrCTAFjoOwz7Og_eKSb4I44ci9LWYDT9Vk-8T28t9yCTp815imCN68oygWYUiEFe9I5mZY5rKKPak8ABPCyL6ipQdgNrwI_6sSFY_HnbOp1oTr3M1E60KiQMJ4","rsk":"92","rcs":"pQ2y2rmsqDTfCBihlRkuAg"},"sentences":{"apps for
2024-05-21 09:22:00 UTC	1369	IN	Data Raw: 30 63 48 4d 36 4c 79 39 77 61 58 68 6c 62 43 35 30 59 58 42 68 5a 43 35 6a 62 32 30 76 61 57 52 7a 65 57 35 6a 4c 32 56 34 4c 33 4a 6c 59 32 56 70 64 6d 55 5f 63 47 46 79 64 47 35 6c 63 6c 39 6b 5a 58 5a 70 59 32 56 66 61 57 51 39 4d 44 63 32 5a 6a 45 32 4f 57 4d 74 59 6a 51 7a 4d 43 30 30 4d 47 55 79 4c 54 6b 34 4e 57 51 74 4e 6d 51 79 59 54 63 78 4e 44 56 6b 4e 54 45 79 50 53 5a 77 59 58 4a 30 62 6d 56 79 58 32 6c 6b 50 54 4d 7a 4d 7a 63 6d 63 47 46 79 64 47 35 6c 63 6c 39 31 63 6d 77 39 61 48 52 30 63 48 4d 6c 4d 30 45 6c 4d 6b 59 6c 4d 6b 5a 79 62 33 56 30 5a 58 49 75 61 57 35 6d 62 32 78 70 62 6d 74 7a 4c 6d 4e 76 62 53 55 79 52 6d 52 35 62 69 55 79 52 6e 52 68 4c 58 56 7a 65 57 35 6a 4a 54 4e 47 64 57 6c 6b 4a 54 4e 45 4a 54 49 30 4a 54 64 43 56 45 Data Ascii: 0cHM6Ly9waXhlbC50YXBhZC5jb20vaWRzeW5jL2V4L3JlY2VpdmU_cGFydG5lcl9kZXZpY2VfaWQ9MDc2ZjE2OWMtYjQzMC00MGUyLTk4NWQtNmQyYTcxNDVkNTEyPSZwYXJ0bmVyX2lkPTMzMzcmcGFydG5lcl91cmw9aHR0cHMlM0ElMkYlMkZyb3V0ZXIuaW5mb2xpbmtzLmNvbSUyRmR5biUyRnRhLXVzeW5jJTNGdWlkJTNEJTI0JTdCVE
2024-05-21 09:22:00 UTC	885	IN	Data Raw: 50 47 6c 74 5a 79 42 6b 5a 57 5a 6c 63 6a 30 69 5a 47 56 6d 5a 58 49 69 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 63 79 35 6c 62 58 68 6b 5a 33 51 75 59 32 39 74 4c 33 56 74 50 33 4a 6c 5a 47 6c 79 5a 57 4e 30 50 57 68 30 64 48 42 7a 4a 54 4e 42 4a 54 4a 47 4a 54 4a 47 63 6d 39 31 64 47 56 79 4c 6d 6c 75 5a 6d 39 73 61 57 35 72 63 79 35 6a 62 32 30 6c 4d 6b 5a 6b 65 57 34 6c 4d 6b 5a 6a 59 57 51 74 64 58 4d 6c 4d 30 5a 31 63 32 56 79 58 32 6c 6b 4a 54 4e 45 4a 46 56 4a 52 43 49 67 63 33 52 35 62 47 55 39 49 6e 64 70 5a 48 52 6f 4f 6a 46 77 65 44 74 6f 5a 57 6c 6e 61 48 51 36 4d 58 42 34 4f 32 52 70 63 33 42 73 59 58 6b 36 62 6d 39 75 5a 53 49 2d 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 Data Ascii: PGltZyBkZWZlcj0iZGVmZXIiIHNyYz0iaHR0cHM6Ly9jcy5lbXhkZ3QuY29tL3VtP3JlZGlyZWN0PWh0dHBzJTNBJTJGJTJGcm91dGVyLmluZm9saW5rcy5jb20lMkZkeW4lMkZjYWQtdXMlM0Z1c2VyX2lkJTNEJFVJRCIgc3R5bGU9IndpZHRoOjFweDtoZWlnaHQ6MXB4O2Rpc3BsYXk6bm9uZSI-CiAgICAgICAgICAgICAgICAgICAgICA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.9	50656	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:00 UTC	1006	OUT	GET /csync/RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%7D
2024-05-21 09:22:00 UTC	628	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:00 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%7D; path=/; expires=Wed, 21 May 2025 09:22:00 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 etag: RX8049d3ed2f50405b8cd5dc9be6476848003 connection: close
2024-05-21 09:22:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.9	50660	172.64.151.101	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:00 UTC	773	OUT	GET /usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:00 UTC	1196	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:00 GMT Content-Length: 0 Connection: close Location: /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1 CF-Ray: 88737fe1eff042e9-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZkxnuNHM6HMAAHezAHb..QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 21 May 2025 09:22:00 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=983; Path=/; Domain=casalemedia.com; Expires=Mon, 19 Aug 2024 09:22:00 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=983; Path=/; Domain=casalemedia.com; Expires=Mon, 19 Aug 2024 09:22:00 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hq8BJj3pCn6K3%2F4Nla8SdJcQ7XE2mmD%2F52k7OSw1OIdjXWP6iPwVbay82TQtYUWfi8%2FX000dryzQBkFk3jIKdFf6uCcn%2BE8zHF37A2zbZLGNdpl7vlVYpLj7yNAU1ZqjUhu%2Fjqt70L0CNA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.9	50661	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:00 UTC	1937	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=tk2EoAPtRYYTTaXUhTWRTahX&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk [TRUNCATED]
2024-05-21 09:22:00 UTC	589	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:22:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_409=22966-tk2EoAPtRYYTTaXUhTWRTahX; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:22:00 GMT; path=/ Set-Cookie: PugT=1716283320; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:22:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:22:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.9	50668	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	1167	OUT	GET /ps/?us_privacy=&ts=1716283320038.4&ri=70&ru=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fcm%3Fid%3Dc6a5ba0d-ce02-41bd-a1ea-842c68bd5108%26ph%3D8f5ed5d4-642c-4222-968a-d709c87ac3c8%26us_privacy%3D%24%7BUS_PRIVACY%7D%26r%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D70%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:01 UTC	769	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:22:01 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP001 location: https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D70%26external_user_id%3D content-length: 0 date: Tue, 21 May 2024 09:22:00 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.9	50669	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	1000	OUT	GET /ps/?us_privacy=&ts=1716283320038.2&ri=2&ru=https%3A%2F%2Fssum-sec.casalemedia.com%2Fusermatchredir%3Fs%3D191740%26us_privacy%3D%24%7BUS_PRIVACY%7D%26cb%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D2%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:01 UTC	714	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:22:01 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP020 location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&us_privacy=&cb=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D2%26external_user_id%3D content-length: 0 date: Tue, 21 May 2024 09:22:00 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.9	50665	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	595	OUT	GET /static/iquid-01.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:01 UTC	405	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:01 GMT Content-Type: application/javascript Content-Length: 69639 Connection: close last-modified: Fri, 08 Mar 2024 09:50:03 GMT etag: "11007-613231db6db5c" Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 09:01:34 GMT via: 1.1 google CF-Cache-Status: HIT Age: 1227 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737fe5ca4f4243-EWR
2024-05-21 09:22:01 UTC	964	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 28 5f 74 79 70 65 6f 66 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 22 73 79 6d 62 6f 6c 22 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 3f 20 66 75 6e 63 74 69 6f 6e 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 0a 20 20 20 20 7d 0a 20 20 20 20 3a 20 66 75 6e 63 74 69 6f 6e 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 20 26 26 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 Data Ascii: "use strict";function _typeof(t) { return (_typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(t) { return typeof t } : function(t) { return t && "function" == typeof Symbol && t.constructor
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 20 20 20 20 69 66 20 28 69 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 69 66 20 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 20 7c 7c 20 28 61 20 3d 20 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 74 29 29 20 7c 7c 20 65 20 26 26 20 74 20 26 26 20 22 6e 75 6d 62 65 72 22 20 3d 3d 20 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 20 26 26 20 28 74 20 3d 20 61 29 2c 0a 20 20 20 20 20 20 20 20 6f 20 3d 20 30 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: if (i) throw r } } }; if (Array.isArray(t) \|\| (a = _unsupportedIterableToArray(t)) \|\| e && t && "number" == typeof t.length) return a && (t = a), o = 0, {
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 20 20 20 74 68 69 73 2e 61 67 65 6e 74 49 64 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 20 2b 20 22 5f 22 20 2b 20 74 68 69 73 2e 67 65 74 52 61 6e 64 6f 6d 28 30 2c 20 31 65 33 29 2c 0a 20 20 20 20 77 69 6e 64 6f 77 20 26 26 20 28 77 69 6e 64 6f 77 2e 69 69 71 5f 6f 62 6a 65 63 74 5f 61 72 72 61 79 20 3d 20 77 69 6e 64 6f 77 2e 69 69 71 5f 6f 62 6a 65 63 74 5f 61 72 72 61 79 20 7c 7c 20 5b 5d 2c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 69 69 71 5f 6f 62 6a 65 63 74 5f 61 72 72 61 79 2e 70 75 73 68 28 74 68 69 73 29 29 2c 0a 20 20 20 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 20 3d 20 35 2e 33 36 2c 0a 20 20 20 20 74 68 69 73 2e 69 6e 69 74 52 75 6e 74 69 6d 65 44 65 66 61 75 6c 74 73 28 74 29 2c 0a 20 20 20 20 74 68 69 73 2e 6c 6f 67 67 65 72 20 3d 20 74 68 69 73 2e Data Ascii: this.agentId = Date.now() + "_" + this.getRandom(0, 1e3), window && (window.iiq_object_array = window.iiq_object_array \|\| [], window.iiq_object_array.push(this)), this.version = 5.36, this.initRuntimeDefaults(t), this.logger = this.
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 69 71 50 69 78 65 6c 53 65 72 76 65 72 41 64 64 72 65 73 73 3a 20 74 20 26 26 20 22 73 74 72 69 6e 67 22 20 3d 3d 20 74 79 70 65 6f 66 20 74 2e 69 69 71 50 69 78 65 6c 53 65 72 76 65 72 41 64 64 72 65 73 73 20 3f 20 74 2e 69 69 71 50 69 78 65 6c 53 65 72 76 65 72 41 64 64 72 65 73 73 20 3a 20 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 69 6e 74 65 6e 74 69 71 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 20 20 70 61 72 74 6e 65 72 43 6c 69 65 6e 74 49 64 3a 20 74 20 26 26 20 22 73 74 72 69 6e 67 22 20 3d 3d 20 74 79 70 65 6f 66 20 74 2e 70 61 72 74 6e 65 72 43 6c 69 65 6e 74 49 64 20 3f 20 74 2e 70 61 72 74 6e 65 72 43 6c 69 65 6e 74 49 64 20 3a 20 22 22 2c 0a 20 20 20 20 20 20 20 20 70 61 72 74 6e 65 72 43 6c 69 65 6e 74 49 64 54 79 70 65 3a 20 74 20 26 26 20 22 Data Ascii: iqPixelServerAddress: t && "string" == typeof t.iiqPixelServerAddress ? t.iiqPixelServerAddress : "https://sync.intentiq.com", partnerClientId: t && "string" == typeof t.partnerClientId ? t.partnerClientId : "", partnerClientIdType: t && "
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 6f 6d 50 50 75 69 64 29 20 26 26 20 74 2e 73 68 6f 75 6c 64 46 69 6c 65 72 54 64 69 64 46 72 6f 6d 50 50 75 69 64 2c 0a 20 20 20 20 20 20 20 20 72 65 70 6f 72 74 4d 65 74 68 6f 64 3a 20 74 20 26 26 20 22 73 74 72 69 6e 67 22 20 3d 3d 20 74 79 70 65 6f 66 20 74 2e 72 65 70 6f 72 74 4d 65 74 68 6f 64 20 3f 20 74 68 69 73 2e 70 61 72 73 65 52 65 70 6f 72 74 69 6e 67 4d 65 74 68 6f 64 28 74 2e 72 65 70 6f 72 74 4d 65 74 68 6f 64 29 20 3a 20 22 47 45 54 22 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 45 69 64 73 4e 61 6d 65 73 54 6f 52 65 70 6f 72 74 3a 20 21 28 21 74 20 7c 7c 20 22 62 6f 6f 6c 65 61 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 2e 61 70 70 65 6e 64 45 69 64 73 4e 61 6d 65 73 54 6f 52 65 70 6f 72 74 29 20 26 26 20 74 2e 61 70 70 65 6e 64 45 69 Data Ascii: omPPuid) && t.shouldFilerTdidFromPPuid, reportMethod: t && "string" == typeof t.reportMethod ? this.parseReportingMethod(t.reportMethod) : "GET", appendEidsNamesToReport: !(!t \|\| "boolean" != typeof t.appendEidsNamesToReport) && t.appendEi
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 2e 6c 6f 61 64 4f 72 43 72 65 61 74 65 46 69 72 73 74 50 61 72 74 79 44 61 74 61 28 29 2c 0a 20 20 20 20 74 68 69 73 2e 63 6c 65 61 72 44 61 74 61 49 66 49 6e 47 72 6f 75 70 42 6f 72 50 61 73 73 69 76 65 4d 6f 64 65 28 29 2c 0a 20 20 20 20 74 68 69 73 2e 67 65 74 49 6e 74 65 6e 74 49 71 44 61 74 61 28 29 2c 0a 20 20 20 20 74 68 69 73 2e 69 6e 74 65 6e 74 49 71 43 6f 6e 66 69 67 2e 6f 70 65 72 61 74 69 6f 6e 61 6c 4d 6f 64 65 2e 63 75 72 72 65 6e 74 20 21 3d 3d 20 74 68 69 73 2e 69 6e 74 65 6e 74 49 71 43 6f 6e 66 69 67 2e 6f 70 65 72 61 74 69 6f 6e 61 6c 4d 6f 64 65 2e 76 72 20 26 26 20 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 28 29 2c 0a 20 20 20 20 74 68 69 73 2e 69 6e 69 74 52 65 70 6f 72 74 69 6e 67 4d 6f 64 75 6c 65 28 29 2c 0a 20 20 20 20 74 68 69 Data Ascii: .loadOrCreateFirstPartyData(), this.clearDataIfInGroupBorPassiveMode(), this.getIntentIqData(), this.intentIqConfig.operationalMode.current !== this.intentIqConfig.operationalMode.vr && this.pixelSync(), this.initReportingModule(), thi
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 62 61 63 6b 54 69 6d 65 6f 74 49 44 20 7c 7c 20 28 74 68 69 73 2e 6c 6f 67 67 65 72 2e 69 6e 66 6f 28 22 43 6f 6e 66 69 67 75 72 69 6e 67 20 66 61 69 6c 73 61 66 65 20 63 61 6c 6c 62 61 63 6b 22 29 2c 0a 20 20 20 20 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 54 69 6d 65 6f 74 49 44 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 66 69 72 65 43 61 6c 6c 62 61 63 6b 4f 6e 52 65 71 75 65 73 74 54 69 6d 65 6f 75 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 20 74 68 69 73 29 2c 20 74 68 69 73 2e 69 6e 74 65 6e 74 49 71 43 6f 6e 66 69 67 2e 74 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 29 29 0a 7d 0a 2c 0a 49 6e 74 65 6e 74 49 71 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 69 6e 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 52 65 70 6f 72 74 Data Ascii: .callbackTimeotID \|\| (this.logger.info("Configuring failsafe callback"), this.callbackTimeotID = setTimeout(this.fireCallbackOnRequestTimeout.bind(null, this), this.intentIqConfig.timeoutInMillis))},IntentIqObject.prototype.printConfigurationReport
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 61 74 63 68 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6c 6f 67 67 65 72 2e 65 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 73 75 73 62 73 63 69 62 65 20 66 6f 72 20 6f 6e 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 29 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 0a 2c 0a 49 6e 74 65 6e 74 49 71 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 69 74 69 6f 6e 61 6c 56 61 72 69 61 62 6c 65 73 49 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 69 6e 74 65 6e 74 49 71 43 6f 6e 66 69 67 2e 6d 6f 64 75 6c 65 49 64 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 75 6e 69 66 69 65 64 65 49 64 3a 20 6e 75 6c 6c 0a 20 20 20 20 7d 2c 0a 20 20 20 20 74 68 69 73 2e 69 6e 74 65 6e 74 49 71 Data Ascii: atch (t) { this.logger.error("Failed to susbscibe for onbeforeunload") } }},IntentIqObject.prototype.additionalVariablesInit = function(t) { this.intentIqConfig.moduleIds = { unifiedeId: null }, this.intentIq
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 72 76 65 72 44 65 76 69 63 65 54 79 70 65 3a 20 22 22 2c 0a 20 20 20 20 20 20 20 20 74 65 72 6d 69 6e 61 74 69 6f 6e 43 61 75 73 65 3a 20 22 22 2c 0a 20 20 20 20 20 20 20 20 70 72 6f 66 69 6c 65 3a 20 22 22 2c 0a 20 20 20 20 20 20 20 20 73 69 74 65 49 64 3a 20 6e 75 6c 6c 0a 20 20 20 20 7d 2c 0a 20 20 20 20 74 68 69 73 2e 69 6e 74 65 6e 74 49 71 43 6f 6e 66 69 67 2e 70 62 6d 6f 6e 69 74 6f 72 69 6e 67 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 70 62 4d 6f 6e 69 74 6f 72 69 6e 67 45 6e 61 62 6c 65 64 3a 20 21 74 20 7c 7c 20 22 62 6f 6f 6c 65 61 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 2e 70 62 4d 6f 6e 69 74 6f 72 69 6e 67 45 6e 61 62 6c 65 64 20 7c 7c 20 21 30 20 3d 3d 3d 20 74 2e 70 62 4d 6f 6e 69 74 6f 72 69 6e 67 45 6e 61 62 6c 65 64 2c 0a 20 20 20 20 20 Data Ascii: rverDeviceType: "", terminationCause: "", profile: "", siteId: null }, this.intentIqConfig.pbmonitoring = { pbMonitoringEnabled: !t \|\| "boolean" != typeof t.pbMonitoringEnabled \|\| !0 === t.pbMonitoringEnabled,
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 3a 20 22 70 65 72 63 65 6e 74 61 67 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 6f 75 70 3a 20 22 67 72 6f 75 70 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 69 71 73 65 72 76 65 72 3a 20 22 49 49 51 53 65 72 76 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 61 62 6c 65 64 3a 20 22 64 69 73 61 62 6c 65 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 53 6f 75 72 63 65 3a 20 74 68 69 73 2e 70 61 72 73 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 53 6f 75 72 63 65 28 74 2e 41 42 54 65 73 74 69 6e 67 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 53 6f 75 72 63 65 29 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 50 65 72 63 65 6e 74 61 67 65 3a 20 2d Data Ascii: : "percentage", group: "group", iiqserver: "IIQServer", disabled: "disabled", currentConfigurationSource: this.parseConfigurationSource(t.ABTestingConfigurationSource) }, currentPercentage: -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.9	50672	172.64.151.101	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	837	OUT	GET /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZkxnuNHM6HMAAHezAHb..QAA; CMPS=983; CMPRO=983
2024-05-21 09:22:01 UTC	991	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:01 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 88737fe5fe3517c1-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZkxnuNHM6HMAAHezAHb..QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 21 May 2025 09:22:01 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=983; Path=/; Domain=casalemedia.com; Expires=Mon, 19 Aug 2024 09:22:01 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s3OSk6sIGYzUdLrT%2Bwf8SWTtyHLMdf5uFxIu1fi4vmP8t3PFYxHDglWbNFZtZD12RrIjq1NmR%2FoEJ8JWl5CjD57kumQSv7j9WFmP%2BJNuxqmRjbry7qNOcEzn2QyJIl6wf34dCK9RaTAwkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:01 UTC	378	IN	Data Raw: 36 66 66 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 69 6e 64 65 78 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 6b 78 6e 75 4e 48 4d 36 48 4d 41 41 48 65 7a 41 48 62 2d 2d 51 41 41 41 39 63 41 41 41 49 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 Data Ascii: 6ff<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZkxnuNHM6HMAAHezAHb--QAAA9cAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none"
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 41 41 48 65 7a 41 48 62 2e 2e 51 41 41 25 32 36 39 38 33 26 61 6d 70 3b 67 70 64 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 31 26 61 6d 70 3b 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 61 6d 70 3b 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 Data Ascii: AAHezAHb..QAA%26983&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doublecli
2024-05-21 09:22:01 UTC	51	IN	Data Raw: 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: "0" height="0" alt="" border="0" /></body></html>
2024-05-21 09:22:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.9	50662	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	590	OUT	GET /static/id5.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:01 UTC	404	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:01 GMT Content-Type: application/javascript Content-Length: 58975 Connection: close last-modified: Sun, 26 Mar 2023 15:25:02 GMT etag: "e65f-5f7cf3aed6f0f" Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 07:40:03 GMT via: 1.1 google CF-Cache-Status: HIT Age: 6118 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737fe5fe86c40c-EWR
2024-05-21 09:22:01 UTC	965	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 69 64 35 69 6f 2f 69 64 35 2d 61 70 69 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 30 2e 32 39 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 69 64 35 2e 69 6f 2f 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 72 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 72 2e Data Ascii: /** * @id5io/id5-api.js * @version v1.0.29 * @link https://id5.io/ * @license Apache-2.0 */!function(n){var i={};function r(e){if(i[e])return i[e].exports;var t=i[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,r),t.l=!0,t.exports}r.
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 69 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 69 7d 74 2e 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 65 74 75 72 6e 20 6a 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 3d 6e 26 26 74 28 65 29 7d 29 2c 6e 7d 2c 74 2e 74 3d 62 2c 74 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: r===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function l(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,i=new Array(t);n<t;n++)i[n]=e[n];return i}t.b=function(e,t){var n=!0;return j(e,function(e){return n=n&&t(e)}),n},t.t=b,t.u=function(e)
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 6e 28 29 7b 6d 28 22 61 6a 61 78 22 2c 22 78 68 72 20 74 69 6d 65 6f 75 74 20 61 66 74 65 72 20 22 2c 69 2e 74 69 6d 65 6f 75 74 2c 22 6d 73 22 29 7d 2c 22 47 45 54 22 3d 3d 3d 61 26 26 6e 26 26 28 73 28 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 74 26 26 22 6e 6f 44 65 63 6f 64 65 57 68 6f 6c 65 55 52 4c 22 69 6e 20 74 26 26 74 2e 6e 6f 44 65 63 6f 64 65 57 68 6f 6c 65 55 52 4c 3f 6e 2e 68 72 65 66 3d 65 3a 6e 2e 68 72 65 66 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3b 74 3d 74 26 26 22 64 65 63 6f 64 65 53 65 61 72 63 68 41 73 53 74 72 69 6e 67 22 69 6e 20 74 26 26 74 2e 64 65 63 6f 64 65 53 65 61 72 63 68 41 73 53 74 72 Data Ascii: n(){m("ajax","xhr timeout after ",i.timeout,"ms")},"GET"===a&&n&&(s((o=function(e,t){var n=document.createElement("a");t&&"noDecodeWholeURL"in t&&t.noDecodeWholeURL?n.href=e:n.href=decodeURIComponent(e);t=t&&"decodeSearchAsString"in t&&t.decodeSearchAsStr
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 28 74 29 3f 28 65 5b 74 3d 74 2e 72 65 70 6c 61 63 65 28 22 5b 5d 22 2c 22 22 29 5d 3d 65 5b 74 5d 7c 7c 5b 5d 2c 65 5b 74 5d 2e 70 75 73 68 28 6e 29 29 3a 65 5b 74 5d 3d 6e 7c 7c 22 22 2c 65 7d 2c 7b 7d 29 3a 7b 7d 7d 28 6e 2e 73 65 61 72 63 68 7c 7c 22 22 29 2c 68 61 73 68 3a 28 6e 2e 68 61 73 68 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 2c 68 6f 73 74 3a 6e 2e 68 6f 73 74 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 7d 28 65 2c 72 29 29 2e 73 65 61 72 63 68 2c 6e 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 68 74 74 70 22 29 2b 22 3a 2f 2f 22 2b 28 65 2e 68 6f 73 74 7c 7c 65 2e 68 6f 73 74 6e 61 6d 65 2b 28 65 2e 70 6f 72 74 3f 22 3a 22 2e 63 Data Ascii: (t)?(e[t=t.replace("[]","")]=e[t]\|\|[],e[t].push(n)):e[t]=n\|\|"",e},{}):{}}(n.search\|\|""),hash:(n.hash\|\|"").replace(/^#/,""),host:n.host\|\|window.location.host}}(e,r)).search,n),e=function(e){return(e.protocol\|\|"http")+"://"+(e.host\|\|e.hostname+(e.port?":".c
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 2c 33 32 36 36 34 38 39 39 30 39 29 2c 28 34 32 39 34 39 36 37 32 39 36 2a 28 32 30 39 37 31 35 31 26 28 61 3d 69 28 61 5e 61 3e 3e 3e 31 36 2c 32 32 34 36 38 32 32 35 30 37 29 5e 69 28 72 5e 72 3e 3e 3e 31 33 2c 33 32 36 36 34 38 39 39 30 39 29 29 29 2b 28 72 3e 3e 3e 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 74 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 2f 5b 28 29 2d 2e 3a 3b 3d 3f 5f 2f 5d 2f 67 3b 77 28 65 2e 62 72 61 6e 64 73 29 26 26 28 65 2e 62 72 61 6e 64 73 3d 41 28 65 2e 62 72 61 6e 64 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 28 65 2e 62 72 61 6e 64 29 26 26 65 2e 62 72 61 6e 64 2e 73 65 61 72 63 68 28 74 29 3c 30 7d 29 29 3b 77 28 65 2e 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 29 26 26 28 Data Ascii: ,3266489909),(4294967296*(2097151&(a=i(a^a>>>16,2246822507)^i(r^r>>>13,3266489909)))+(r>>>0)).toString()},t.f=function(e){var t=/[()-.:;=?_/]/g;w(e.brands)&&(e.brands=A(e.brands,function(e){return S(e.brand)&&e.brand.search(t)<0}));w(e.fullVersionList)&&(
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 66 2e 63 61 6c 6c 28 65 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 72 65 74 75 72 6e 20 43 28 65 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 20 43 28 65 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 72 65 74 75 72 6e 20 43 28 65 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 77 28 65 29 7c 7c 53 28 65 29 29 72 65 74 75 72 6e 21 28 30 3c 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 69 66 28 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 Data Ascii: return f.call(e)==="[object "+t+"]"}function _(e){return C(e,a)}function S(e){return C(e,r)}function w(e){return C(e,i)}function k(e){if(!e)return!0;if(w(e)\|\|S(e))return!(0<e.length);for(var t in e)if(hasOwnProperty.call(e,t))return!1;return!0}function j(
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 28 65 5b 6e 5d 3d 69 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 69 2c 72 3d 7b 7d 2c 61 3d 4f 62 6a 65 Data Ascii: ){for(var t=1;t<arguments.length;t++){var n,i=arguments[t];for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n])}return e}).apply(this,arguments)}function c(e,t){if(null==e)return{};var n,i=function(e,t){if(null==e)return{};var n,i,r={},a=Obje
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 41 4c 4c 4f 57 45 44 5f 42 59 5f 43 4f 4e 46 49 47 3a 22 66 6f 72 63 65 5f 61 6c 6c 6f 77 65 64 5f 62 79 5f 63 6f 6e 66 69 67 22 2c 49 44 35 5f 43 4f 4e 53 45 4e 54 3a 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 2c 50 52 4f 56 49 53 49 4f 4e 41 4c 3a 22 70 72 6f 76 69 73 69 6f 6e 61 6c 22 2c 4a 55 52 49 53 44 49 43 54 49 4f 4e 3a 22 6a 75 72 69 73 64 69 63 74 69 6f 6e 22 2c 43 4f 4e 53 45 4e 54 5f 41 50 49 3a 22 63 6f 6e 73 65 6e 74 5f 61 70 69 22 7d 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 73 28 74 68 69 73 2c 69 29 2c 68 28 74 68 69 73 2c 22 61 6c 6c 6f 77 65 64 22 2c 21 31 29 2c 68 28 74 68 69 73 2c 22 67 72 61 6e 74 54 79 70 65 22 2c 67 2e 4e 4f 4e 45 29 2c 68 28 74 68 69 73 2c 22 61 70 69 22 2c 76 Data Ascii: ALLOWED_BY_CONFIG:"force_allowed_by_config",ID5_CONSENT:"id5_consent",PROVISIONAL:"provisional",JURISDICTION:"jurisdiction",CONSENT_API:"consent_api"}),b=function(){function i(e,t,n){s(this,i),h(this,"allowed",!1),h(this,"grantType",g.NONE),h(this,"api",v
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 29 2c 68 28 74 68 69 73 2c 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 76 6f 69 64 20 30 29 2c 68 28 74 68 69 73 2c 22 5f 63 6f 6e 73 65 6e 74 52 65 71 75 65 73 74 65 64 22 2c 21 31 29 2c 74 68 69 73 2e 69 6e 76 6f 63 61 74 69 6f 6e 49 64 3d 65 2c 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 74 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 43 6f 6e 66 69 67 3d 6e 2c 74 68 69 73 2e 72 65 73 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 28 29 7d 72 65 74 75 72 6e 20 66 28 6c 2c 5b 7b 6b 65 79 3a 22 72 65 71 75 65 73 74 43 6f 6e 73 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 69 66 28 65 29 74 68 69 73 2e 63 6f 6e 73 65 6e 74 44 61 74 61 3d 6e 65 77 20 6d 2c 4f 62 6a 65 63 74 28 64 2e 75 29 28 74 68 69 Data Ascii: void 0),h(this,"localStorage",void 0),h(this,"_consentRequested",!1),this.invocationId=e,this.localStorage=t,this.storageConfig=n,this.resetConsentData()}return f(l,[{key:"requestConsent",value:function(e,t,n,i){if(e)this.consentData=new m,Object(d.u)(thi
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 41 70 69 3a 20 44 65 74 65 63 74 65 64 20 41 50 49 20 27 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6f 6e 73 65 6e 74 44 61 74 61 2e 61 70 69 2c 22 27 20 66 72 6f 6d 20 73 74 61 74 69 63 20 63 6f 6e 73 65 6e 74 20 64 61 74 61 22 29 2c 65 29 2c 74 28 74 68 69 73 2e 63 6f 6e 73 65 6e 74 44 61 74 61 29 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 6f 6b 75 70 49 61 62 43 6f 6e 73 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 5b 74 5d 3d 21 31 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 5b 74 5d 7c 7c 28 72 5b 74 5d 3d 21 30 2c 65 26 26 6f 28 69 2e 63 6f 6e 73 65 6e 74 44 61 74 61 2c 65 29 2c 72 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f Data Ascii: Api: Detected API '".concat(this.consentData.api,"' from static consent data"),e),t(this.consentData)}},{key:"lookupIabConsent",value:function(n){var i=this,r=[],e=function(t){return r[t]=!1,function(e){r[t]\|\|(r[t]=!0,e&&o(i.consentData,e),r.every(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.9	50663	185.64.190.79	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	1938	OUT	GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk [TRUNCATED]
2024-05-21 09:22:01 UTC	1066	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?p=156872&pmc=1&pr=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=156872^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156872:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 21 May 2024 09:22:01 GMT Content-Length: 188 Connection: close
2024-05-21 09:22:01 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 70 3d 31 35 36 38 37 32 26 61 6d 70 3b 70 6d 63 3d 31 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 25 32 46 64 79 6e 25 32 46 70 62 6d 2d 75 73 79 6e 63 25 33 46 75 69 64 25 33 44 39 43 36 34 43 41 32 31 2d 35 30 41 44 2d 34 34 44 31 2d 39 41 41 37 2d 34 46 32 42 41 34 36 44 31 37 31 42 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?p=156872&pmc=1&pr=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.9	50664	185.89.210.46	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	895	OUT	GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAMgAygDMK7PsbIGOANAA0gDEK7PsbIGGAI.
2024-05-21 09:22:01 UTC	1435	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://router.infolinks.com/dyn/apn-usync?user_id=6403784576581203868 AN-X-Request-Uuid: bf3bce12-39c5-4371-99bc-dc9cc452588d Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.9	50667	185.64.191.210	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	1936	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; chkChromeAb67Sec=2; pi=157743:4; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk [TRUNCATED]
2024-05-21 09:22:01 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:22:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003&KRTB&17107-RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 19-Aug-2024 09:22:01 GMT; path=/ Set-Cookie: PugT=1716283321; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:22:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:22:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.9	50666	51.89.9.253	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	709	OUT	GET /usync/?pubId=598ce3ddaee8c90 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:01 UTC	219	IN	HTTP/1.1 200 OK content-type: text/html cache-control: no-transform, no-cache content-length: 2162 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-21 09:22:01 UTC	1343	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 79 6e 63 20 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 76 61 72 20 73 79 6e 63 50 69 78 65 6c 73 20 3d 20 22 22 3b 0a 20 20 20 20 76 61 72 20 73 79 6e 63 49 66 72 61 6d 65 73 20 3d 20 22 22 3b 0a 0a 20 20 20 20 76 61 72 20 47 44 50 52 5f 41 50 50 4c 49 45 53 20 3d 20 22 67 64 70 72 3d 22 3b 0a 20 20 20 20 76 61 72 20 47 44 50 52 20 3d 20 22 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3b 0a 20 20 20 20 76 61 72 20 55 53 5f 50 52 49 56 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Sync Pixels</title></head><body><script> var syncPixels = ""; var syncIframes = ""; var GDPR_APPLIES = "gdpr="; var GDPR = "gdpr_consent="; var US_PRIV
2024-05-21 09:22:01 UTC	819	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 2e 72 65 70 6c 61 63 65 28 22 24 7b 55 53 5f 50 52 49 56 41 43 59 7d 22 2c 20 75 73 50 72 69 76 61 63 79 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 20 3d 20 75 72 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 79 6e 63 49 66 72 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 79 6e 63 46 20 3d 20 73 79 6e 63 49 66 72 61 6d 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 79 6e 63 46 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 79 6e 63 46 2e Data Ascii: ); url = url.replace("${US_PRIVACY}", usPrivacy); new Image().src = url; }); } } if (syncIframes) { var syncF = syncIframes.split(","); if (syncF != null) { syncF.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.9	50674	50.57.31.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	492	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=2CF337632DB31943
2024-05-21 09:22:01 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 2 Set-Cookie: SEUNCY=2CF337632DB31943; Expires=Wed, 21 May 2025 09:22:01 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 21 May 2024 09:22:01 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-05-21 09:22:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.9	50677	34.98.64.218	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	724	OUT	GET /w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-21 09:22:01 UTC	567	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321; Version=1; Expires=Wed, 21-May-2025 09:22:01 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://u.openx.net/w/1.0/cm?cc=1&id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D Date: Tue, 21 May 2024 09:22:01 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.9	50679	34.193.171.116	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	672	OUT	GET /i/ck/infolink?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fiqm-us%3Fuid%3D%7BIQM_COOKIE%7D%20 HTTP/1.1 Host: pxl.iqm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:01 UTC	755	IN	HTTP/1.1 302 Found Server: openresty Date: Tue, 21 May 2024 09:22:01 GMT Content-Type: image/avif;charset=UTF-8 Content-Length: 81 Connection: close Set-Cookie: infolink=MTcxNzQ5MjkyMTU0OQ==; Domain=.pxl.iqm.com; Path=/; max-age=2592000; SameSite=None; Secure; Set-Cookie: iqm.retarget.uid=e714687a-b06b-42cd-94cc-eea520c604e9; Domain=.pxl.iqm.com; Path=/; max-age=2592000; SameSite=None; Secure; Location: https://router.infolinks.com/dyn/iqm-us?uid=e714687a-b06b-42cd-94cc-eea520c604e9 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-21 09:22:01 UTC	81	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 2f 64 79 6e 2f 69 71 6d 2d 75 73 3f 75 69 64 3d 65 37 31 34 36 38 37 61 2d 62 30 36 62 2d 34 32 63 64 2d 39 34 63 63 2d 65 65 61 35 32 30 63 36 30 34 65 39 20 Data Ascii: https://router.infolinks.com/dyn/iqm-us?uid=e714687a-b06b-42cd-94cc-eea520c604e9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.9	50676	81.17.55.122	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	756	OUT	GET /api/sync?callerId=112&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz\|130:3d12ee56-7200-483f-ad58-25321367cbba
2024-05-21 09:22:01 UTC	142	IN	HTTP/1.1 404 Not Found date: Tue, 21 May 2024 09:22:01 GMT content-type: text/plain; charset=utf-8 content-length: 9 connection: close
2024-05-21 09:22:01 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.9	50678	3.75.62.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	737	OUT	GET /ups/58786/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; IDSYNC=18z8~2ijl
2024-05-21 09:22:01 UTC	729	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:01 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ijl:19cy~2ijl";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 21-May-2025 09:22:01 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://router.infolinks.com/dyn/VR-usync?uid=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; Expires=Wed, 21 May 2025 15:22:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.9	50685	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	1266	OUT	GET / HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC
2024-05-21 09:22:01 UTC	681	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: immutable, max-age=31536000, public CF-Cache-Status: HIT Age: 279188 Last-Modified: Sat, 18 May 2024 03:48:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RV403hCzlfmjWv1XoXR5Q8JAwqRDFrrliMvsiySgtz0ShQX6V2pNUK3RDg%2B1Wah3JHZtcRZX3iHS5hxqQepgnUb3luwdobJCFuWN9OSn5IOwMQj0EmA%2FzWa9uTmjQKAtGpLj86AM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737fe91c517c96-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:01 UTC	688	IN	Data Raw: 37 64 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 61 6d 58 65 4b 69 73 50 4f 63 36 59 53 5a 36 4a 4e 62 38 75 74 37 45 4f 52 38 65 7a 4f 37 73 34 4c 38 62 34 42 6c 36 36 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c Data Ascii: 7d08<!DOCTYPE html><html><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="csrf-token" content="amXeKisPOc6YSZ6JNb8ut7EOR8ezO7s4L8b4Bl66"> <meta name="robots" content="index, follow,
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 35 46 45 37 35 45 32 39 39 33 38 46 45 31 44 30 44 44 35 34 42 41 44 32 42 32 35 43 39 39 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 41 32 30 39 32 30 46 45 38 42 32 36 39 33 41 38 34 34 36 39 33 43 41 37 42 32 44 41 30 33 34 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 34 34 33 35 32 37 39 36 32 39 38 34 45 44 36 31 31 33 45 37 31 43 32 45 31 43 31 45 36 46 43 43 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 35 38 44 Data Ascii: ta name="msvalidate.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" /><meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" /><meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" /><meta name="msvalidate.01" content="58D
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 45 37 43 42 33 45 30 42 43 39 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 46 37 42 33 42 44 32 46 45 36 39 30 37 32 42 43 43 45 34 31 32 36 42 39 43 43 35 30 34 35 43 42 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 38 45 46 39 35 41 44 32 31 32 41 44 44 34 38 43 38 37 38 46 32 31 42 31 39 33 41 42 38 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 43 32 35 44 41 37 34 43 38 46 46 35 46 41 42 31 34 32 46 43 37 30 32 30 34 42 42 30 37 41 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 Data Ascii: E7CB3E0BC9" /><meta name="msvalidate.01" content="F7B3BD2FE69072BCCE4126B9CC5045CB" /><meta name="msvalidate.01" content="98EF95AD212ADD48C878F21B193AB8E4" /><meta name="msvalidate.01" content="7C25DA74C8FF5FAB142FC70204BB07A6" /><meta name="msvalidat
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 38 36 36 30 43 36 42 34 33 44 35 34 42 37 31 42 30 33 32 35 37 33 44 31 44 43 43 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 36 38 32 37 32 43 39 44 31 46 31 37 46 34 33 41 33 36 42 45 46 39 30 30 43 33 37 39 32 33 37 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 35 32 42 36 38 46 39 33 31 34 32 37 33 32 45 41 42 37 43 43 42 37 41 35 44 37 37 36 44 31 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 42 31 41 39 39 42 44 44 37 44 36 31 35 36 42 33 30 41 37 38 45 36 38 46 33 36 35 43 39 46 38 33 22 20 2f 3e 0a 3c 6d 65 Data Ascii: 8660C6B43D54B71B032573D1DCC6" /><meta name="msvalidate.01" content="968272C9D1F17F43A36BEF900C379237" /><meta name="msvalidate.01" content="752B68F93142732EAB7CCB7A5D776D16" /><meta name="msvalidate.01" content="B1A99BDD7D6156B30A78E68F365C9F83" /><me
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 20 2d 20 41 6c 6c 20 41 62 6f 75 74 20 45 76 65 72 79 74 68 69 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 20 69 73 20 61 20 77 65 62 73 69 74 65 20 74 68 61 74 20 77 72 69 74 65 73 20 61 62 6f 75 74 20 6d 61 6e 79 20 74 6f 70 69 63 73 20 6f 66 20 69 6e 74 65 72 65 73 74 20 74 6f 20 79 6f 75 2c 20 69 74 26 23 30 33 39 3b 73 20 61 20 62 6c 6f 67 20 74 68 61 74 20 73 68 61 72 65 73 20 75 73 65 66 75 6c 20 6b 6e 6f 77 6c 65 64 67 65 20 61 6e 64 20 69 6e 73 69 67 68 74 Data Ascii: ><meta property="og:title" content="Custommapposter - All About Everything" /><meta property="og:description" content="Custommapposter is a website that writes about many topics of interest to you, it's a blog that shares useful knowledge and insight
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 39 63 62 61 37 36 62 31 66 63 64 38 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 6a 73 2f 6e 65 77 73 69 6b 65 2e 6a 73 3f 69 64 3d 32 65 32 39 39 33 63 62 33 64 37 35 62 62 33 34 39 32 62 31 22 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 20 2f 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: 9cba76b1fcd8"> <script src="/static-res/js/newsike.js?id=2e2993cb3d75bb3492b1" defer></script> <link rel="preconnect" href="https://www.googletagmanager.com" /><link rel="dns-prefetch" href="https://www.googletagmanager.com" />
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 32 65 63 62 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 70 70 6c 65 2d 69 63 6f 6e 2d 31 38 30 78 31 38 30 2e 70 6e 67 3f 69 64 3d 61 63 35 64 38 36 36 39 66 39 66 61 63 30 30 37 31 36 64 61 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 31 39 32 78 31 39 32 2e 70 6e 67 3f 69 64 3d 38 64 65 31 Data Ascii: 2ecb" /> <link rel="apple-touch-icon" sizes="180x180" href="/static-res/img/newsike/apple-icon-180x180.png?id=ac5d8669f9fac00716da" /> <link rel="icon" type="image/png" sizes="192x192" href="/static-res/img/newsike/android-icon-192x192.png?id=8de1
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 67 72 6f 77 2d 69 6e 69 74 69 61 6c 69 7a 65 72 3d 22 22 3e 21 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 7c 7c 28 28 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 2e 5f 2e 70 75 73 68 28 65 29 3b 7d 29 2c 28 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 2e 5f 3d 5b 5d 29 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 28 65 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 29 2c 28 65 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 66 61 76 65 73 2e 67 72 6f 77 2e 6d 65 2f 6d 61 69 6e 2e 6a 73 22 29 2c 28 65 2e Data Ascii: <script data-grow-initializer="">!(function(){window.growMe\|\|((window.growMe=function(e){window.growMe._.push(e);}),(window.growMe._=[]));var e=document.createElement("script");(e.type="text/javascript"),(e.src="https://faves.grow.me/main.js"),(e.
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 30 20 66 6c 65 78 2d 31 20 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6d 69 6e 2d 77 2d 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 70 2d 32 20 72 6f 75 6e 64 65 64 2d 6c 67 22 20 3a 63 6c 61 73 73 3d 22 7b 20 27 62 67 2d 69 6e 64 69 67 6f 2d 36 30 30 27 3a 20 73 74 79 6c 65 20 3d 3d 20 27 73 75 63 63 65 73 73 27 2c 20 27 62 67 2d 72 65 64 2d 36 30 30 27 3a 20 73 74 79 6c 65 20 3d 3d 20 27 64 61 6e 67 65 72 27 20 7d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 78 2d 73 68 6f 77 3d 22 73 74 79 6c 65 20 3d 3d 20 27 73 75 63 63 65 73 73 27 22 20 63 6c 61 73 73 3d 22 68 2d 35 Data Ascii: <div class="w-0 flex-1 flex items-center min-w-0"> <span class="flex p-2 rounded-lg" :class="{ 'bg-indigo-600': style == 'success', 'bg-red-600': style == 'danger' }"> <svg x-show="style == 'success'" class="h-5
2024-05-21 09:22:01 UTC	1369	IN	Data Raw: 61 67 65 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 2d 73 68 72 69 6e 6b 2d 30 20 73 6d 3a 6d 6c 2d 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 2d 6d 72 2d 31 20 66 6c 65 78 20 70 2d 32 20 72 6f 75 6e 64 65 64 2d 6d 64 20 66 6f 63 75 73 3a 6f 75 74 6c 69 6e 65 2d 6e 6f 6e 65 20 73 6d 3a 2d 6d 72 2d 32 20 74 72 61 6e 73 69 74 69 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 63 6c 61 73 73 Data Ascii: age"></p> </div> <div class="flex-shrink-0 sm:ml-3"> <button type="button" class="-mr-1 flex p-2 rounded-md focus:outline-none sm:-mr-2 transition" :class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.9	50680	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	706	OUT	GET /usersync2/infolinks HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-21 09:22:02 UTC	687	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:02 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%222109%22%7D; path=/; expires=Wed, 21 May 2025 09:22:02 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://cms.quantserve.com/pixel/p-QcHdy7VcGLKJK.gif?idmatch=0&siteId=995936&rndcb=3826987113 etag: RX8049d3ed2f50405b8cd5dc9be6476848003 connection: close
2024-05-21 09:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.9	50687	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	811	OUT	GET /ps/?us_privacy=&ts=1716283320038.6&ri=85&ru=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%2F33across%3Fus_privacy%3D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:02 UTC	592	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:22:02 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP014 location: https://match.prod.bidr.io/cookie-sync/33across?us_privacy= content-length: 0 date: Tue, 21 May 2024 09:22:01 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.9	50682	15.197.193.217	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	778	OUT	GET /track/cmf/generic?ttd_pid=f0v35ew&ttd_tpi=1&us_privacy= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; TDCPM=CAEYASABKAIyCwjMhLefxuD8PBAFOAFaC2FkY29uZHVjdG9yYAI.
2024-05-21 09:22:02 UTC	619	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:02 GMT Content-Length: 407 Connection: close server: Kestrel location: https://ssc-cms.33across.com/ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1718875322%26external_user_id%3Dd7c589fa-248b-42e0-8bc4-ffb4bdc33d5c set-cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; expires=Wed, 21 May 2025 09:22:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjK2JjExuD8PBAFOAFaB2YwdjM1ZXdgAg..; expires=Wed, 21 May 2025 09:22:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-21 09:22:02 UTC	407	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 72 69 3d 31 30 32 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 73 2d 78 63 68 2d 63 68 69 63 61 67 6f 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 25 32 46 6d 61 74 63 68 25 33 46 62 69 64 64 65 72 5f 69 64 25 33 44 31 30 32 25 32 36 74 74 6c 25 33 44 31 37 31 38 38 37 35 33 32 32 25 32 36 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 25 33 44 64 37 63 35 38 39 66 61 2d 32 34 38 62 2d 34 32 65 30 2d 38 62 63 34 2d 66 66 62 34 62 64 63 33 33 64 35 63 22 3e 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 72 69 3d 31 30 32 26 Data Ascii: Redirecting to: <a href="https://ssc-cms.33across.com/ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1718875322%26external_user_id%3Dd7c589fa-248b-42e0-8bc4-ffb4bdc33d5c">https://ssc-cms.33across.com/ps/?ri=102&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.9	50689	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	606	OUT	GET /js/1931.004-3.034/in_place.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:02 UTC	404	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:02 GMT Content-Type: application/javascript Content-Length: 41666 Connection: close last-modified: Tue, 14 May 2024 18:57:49 GMT etag: "a2c2-6186e940902ef" Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 07:04:01 GMT via: 1.1 google CF-Cache-Status: HIT Age: 8280 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737feaca1a422e-EWR
2024-05-21 09:22:02 UTC	965	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 24 69 63 65 2e 70 72 6f 64 75 63 74 73 2e 24 63 72 65 61 74 65 28 22 69 6e 70 6c 61 63 65 22 2c 7b 69 6e 73 74 61 6e 63 65 73 3a 5b 5d 2c 61 64 64 41 70 69 48 61 6e 64 6c 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 6f 3d 74 68 69 73 2c 72 3d 74 68 69 73 2e 24 72 6f 6f 74 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 76 61 72 20 65 2c 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 64 61 74 61 29 3b 73 77 69 74 63 68 28 69 2e 6e 61 6d 65 29 7b 63 61 73 65 22 70 72 6f 64 75 63 74 52 65 61 64 79 22 3a 6f 2e 73 65 74 41 64 76 69 65 77 28 6f 2e 67 65 74 43 75 72 72 Data Ascii: !function(){var t=window.$ice.products.$create("inplace",{instances:[],addApiHandlers:function(){var a,o=this,r=this.$root;window.addEventListener("message",function(t){try{var e,i=JSON.parse(t.data);switch(i.name){case"productReady":o.setAdview(o.getCurr
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 74 74 69 6e 67 73 2e 6f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 65 2e 61 64 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6d 72 63 56 69 64 65 6f 41 64 4d 6f 64 65 3d 21 31 2c 65 2e 61 64 43 6f 6e 74 61 69 6e 65 72 26 26 72 2e 73 65 74 74 69 6e 67 73 2e 6f 62 73 65 72 76 65 72 2e 75 6e 6f 62 73 65 72 76 65 28 65 2e 61 64 43 6f 6e 74 61 69 6e 65 72 29 7d 2c 32 65 33 29 29 7d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 29 7d 2c 67 65 74 43 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 6c 6f 74 2e 69 64 3d Data Ascii: ttings.observer.observe(e.adContainer),this.setTimeout(function(){e.mrcVideoAdMode=!1,e.adContainer&&r.settings.observer.unobserve(e.adContainer)},2e3))}}catch(t){}})},getCurrentInstance:function(e){return this.instances.find(function(t){return t.slot.id=
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 2e 72 65 66 72 65 73 68 44 61 74 61 3d 7b 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 3a 74 2c 68 6f 6f 6b 49 64 3a 61 2e 61 64 43 6f 6e 74 61 69 6e 65 72 49 64 2c 70 72 6f 64 3a 61 2e 70 72 6f 64 43 6f 64 65 2c 67 61 72 63 3a 61 2e 72 65 66 72 65 73 68 43 6f 75 6e 74 2c 63 61 70 61 72 61 3a 6e 2e 63 61 70 61 72 61 2c 64 69 6d 3a 6f 2c 68 62 52 65 66 72 65 73 68 44 65 6c 61 79 3a 61 2e 68 62 52 65 66 72 65 73 68 44 65 6c 61 79 7d 2c 61 2e 73 74 6f 70 52 65 66 72 65 73 68 3d 21 30 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 2e 72 65 66 72 65 73 68 54 69 6d 65 6f 75 74 29 2c 72 2e 6d 72 63 56 69 64 65 6f 41 64 4d 6f 64 65 3d 21 31 2c 72 2e 61 64 43 6f 6e 74 61 69 6e 65 72 26 26 65 2e 73 65 74 74 69 6e 67 73 2e 6f 62 73 65 72 76 65 72 2e 75 6e 6f 62 73 65 Data Ascii: .refreshData={currentInstance:t,hookId:a.adContainerId,prod:a.prodCode,garc:a.refreshCount,capara:n.capara,dim:o,hbRefreshDelay:a.hbRefreshDelay},a.stopRefresh=!0,clearTimeout(a.refreshTimeout),r.mrcVideoAdMode=!1,r.adContainer&&e.settings.observer.unobse
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 20 20 20 20 20 20 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 20 20 20 20 7d 20 20 20 20 2e 69 6e 66 6f 2d 6e 61 74 69 76 65 2d 63 6f 70 79 2d 67 72 65 79 20 7b 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 35 30 70 78 3b 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 20 30 20 30 20 30 70 78 3b 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 20 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 20 20 20 20 Data Ascii: overflow: hidden; text-overflow: ellipsis; } .info-native-copy-grey { font-size: 14px; color: #666666; width: 100%; max-height: 50px; margin: 8px 0 0 0px; float: left; white-space: normal;
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 20 20 2e 69 6e 66 6f 2d 62 61 6e 6e 65 72 2d 6e 61 74 69 76 65 2d 70 6c 61 79 2d 62 74 6e 20 2e 69 6e 66 6f 2d 72 69 70 70 6c 65 7b 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 31 36 30 70 78 3b 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 31 36 30 70 78 3b 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 2d 31 3b 20 20 20 20 20 20 20 20 6c 65 66 74 3a 35 30 25 3b 20 20 20 20 20 20 20 20 74 6f 70 3a 35 30 25 3b 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 30 3b 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 2d 38 30 70 78 20 30 20 30 20 2d 38 30 70 78 3b 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 70 78 3b 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 Data Ascii: .info-banner-native-play-btn .info-ripple{ position:absolute; width:160px; height:160px; z-index:-1; left:50%; top:50%; opacity:0; margin:-80px 0 0 -80px; border-radius:100px; -webkit
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 20 20 2e 69 6e 66 6f 2d 6e 61 74 69 76 65 2d 77 72 61 70 70 65 72 2e 6e 61 74 69 76 65 2d 77 72 61 70 70 65 72 2d 33 30 30 78 32 35 30 20 7b 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 37 30 70 78 3b 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 32 30 70 78 3b 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 20 20 20 20 7d 20 20 20 20 2e 69 6e 66 6f 2d 6e 61 74 69 76 65 2d 68 65 61 64 6c 69 6e 65 2d 62 6c 75 65 2e 6e 61 74 69 76 65 2d 68 65 61 64 6c 69 6e 65 2d 62 6c 75 65 2d 33 30 30 78 32 35 30 20 7b 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 20 20 20 2e 69 6e 66 6f 2d 6e 61 74 69 76 65 2d 63 6f 70 79 2d 67 72 65 79 2e 6e 61 74 69 76 65 2d 63 6f 70 79 2d 67 72 65 79 2d 33 30 30 78 32 35 30 20 7b 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .info-native-wrapper.native-wrapper-300x250 { width: 270px; height: 220px; padding: 15px; } .info-native-headline-blue.native-headline-blue-300x250 { } .info-native-copy-grey.native-copy-grey-300x250 {
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 6e 66 6f 2d 72 69 70 70 6c 65 20 69 6e 66 6f 2d 62 6c 75 65 2d 70 75 6c 73 65 22 3e 3c 2f 73 70 61 6e 3e 20 20 20 20 3c 2f 64 69 76 3e 20 20 20 20 3c 2f 64 69 76 3e 27 2c 22 31 36 30 78 36 30 30 22 3a 27 3c 73 74 79 6c 65 3e 5c 74 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 5c 74 5c 74 62 6f 64 79 20 7b 5c 74 5c 74 6d 61 72 67 69 6e 3a 20 30 70 78 3b 5c 74 5c 74 70 61 64 64 69 6e 67 3a 20 30 3b 5c 74 5c 74 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 5c 74 7d 5c 74 5c 74 2e 69 6e 66 6f 2d 6e 61 74 69 76 65 2d 77 72 61 70 70 65 72 20 7b 5c 74 5c 74 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 5c 74 5c 74 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c Data Ascii: <span class="info-ripple info-blue-pulse"></span> </div> </div>',"160x600":'<style>\t@charset "UTF-8";\t\tbody {\t\tmargin: 0px;\t\tpadding: 0;\t\tbox-sizing: border-box;\t}\t\t.info-native-wrapper {\t\tposition: absolute;\t\tfont-family: Arial
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 6a 65 63 74 2d 70 6f 73 69 74 69 6f 6e 3a 20 62 6f 74 74 6f 6d 3b 5c 74 7d 5c 74 2f 2a 49 6d 61 67 65 20 54 68 75 6d 62 6e 61 69 6c 20 45 6e 64 73 2a 2f 5c 74 5c 74 2f 2a 42 75 74 74 6f 6e 20 41 6e 69 6d 61 74 69 6f 6e 20 53 74 61 72 74 2a 2f 5c 74 2e 69 6e 66 6f 2d 62 6c 75 65 2d 70 75 6c 73 65 20 7b 5c 74 5c 74 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 31 32 32 63 63 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 74 5c 74 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 23 31 31 32 32 63 63 2c 20 23 31 31 32 32 63 63 29 3b 5c 74 7d 5c 74 2e 69 6e 66 6f 2d 62 61 6e 6e 65 72 2d 6e 61 74 69 76 65 2d 70 6c 61 79 2d 62 74 6e 7b 5c 74 5c 74 68 65 69 67 68 74 3a 36 30 70 78 3b 5c Data Ascii: ject-position: bottom;\t}\t/Image Thumbnail Ends/\t\t/Button Animation Start/\t.info-blue-pulse {\t\tbackground-color: #1122cc!important;\t\tbackground-image: linear-gradient(90deg, #1122cc, #1122cc);\t}\t.info-banner-native-play-btn{\t\theight:60px;\
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 62 74 6e 20 2e 69 6e 66 6f 2d 72 69 70 70 6c 65 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 5c 74 5c 74 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 38 73 3b 5c 74 5c 74 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 38 73 3b 5c 74 7d 5c 74 73 70 61 6e 2e 69 6e 66 6f 2d 73 74 72 65 74 63 68 20 7b 5c 74 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 74 20 20 6d 61 72 67 69 6e 3a 20 31 32 70 78 3b 5c 74 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2c 20 31 2e 37 35 29 3b 5c 74 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2c 20 31 2e 37 35 29 3b 5c 74 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2c 20 31 2e Data Ascii: btn .info-ripple:nth-child(3){\t\tanimation-delay:.8s;\t\t-webkit-animation-delay:.8s;\t}\tspan.info-stretch {\t display: inline-block;\t margin: 12px;\t -webkit-transform: scale(1, 1.75);\t -moz-transform: scale(1, 1.75);\t -o-transform: scale(1, 1.
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 72 2d 6e 61 74 69 76 65 2d 70 6c 61 79 2d 62 74 6e 2e 70 75 6c 73 65 2d 62 74 6e 2d 6c 6f 63 61 74 69 6f 6e 2d 31 36 30 78 36 30 30 20 7b 5c 74 5c 74 74 6f 70 3a 37 35 25 3b 5c 74 5c 74 6c 65 66 74 3a 35 30 25 3b 5c 74 7d 5c 74 2f 2a 20 31 36 30 78 36 30 30 20 53 74 79 6c 65 73 20 45 6e 64 20 2a 2f 5c 74 5c 74 3c 2f 73 74 79 6c 65 3e 5c 74 5c 74 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 6f 2d 6e 61 74 69 76 65 2d 77 72 61 70 70 65 72 20 6e 61 74 69 76 65 2d 77 72 61 70 70 65 72 2d 31 36 30 78 36 30 30 22 3e 5c 74 5c 74 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 6f 2d 6e 61 74 69 76 65 2d 68 65 61 64 6c 69 6e 65 2d 62 6c 75 65 20 6e 61 74 69 76 65 2d 68 65 61 64 6c 69 6e 65 2d 62 6c 75 65 2d 31 36 30 78 36 30 30 22 3e 3c 25 3d 20 61 64 2e 74 69 74 6c Data Ascii: r-native-play-btn.pulse-btn-location-160x600 {\t\ttop:75%;\t\tleft:50%;\t}\t/* 160x600 Styles End */\t\t</style>\t\t<div class="info-native-wrapper native-wrapper-160x600">\t\t<div class="info-native-headline-blue native-headline-blue-160x600"><%= ad.titl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.9	50683	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	765	OUT	GET /static/container-4.0.html HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:02 UTC	383	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 18 Dec 2023 15:25:02 GMT Cache-Control: max-age=2592000 expires: Thu, 20 Jun 2024 07:40:07 GMT via: 1.1 google CF-Cache-Status: HIT Age: 6115 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88737feacf6f424a-EWR
2024-05-21 09:22:02 UTC	986	IN	Data Raw: 61 36 63 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 49 4c 5f 49 46 52 5f 43 6f 6e 74 65 6e 74 22 3e 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 64 69 73 70 6c 61 79 4d 65 73 73 61 67 65 2c 20 66 61 6c 73 65 29 3b 0d 0a 20 Data Ascii: a6c<html><head><meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=0" /></head><body><div id="IL_IFR_Content"></div><script> (function () { window.addEventListener("message", displayMessage, false);
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 20 20 20 70 69 78 65 6c 20 2b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 27 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 77 69 64 74 68 3a 31 70 78 3b 20 68 65 69 67 68 74 3a 31 70 78 27 20 61 6c 74 3d 27 27 3e 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 49 43 45 5d 20 64 6f 20 6e 6f 74 68 69 6e 67 22 2c 20 65 72 72 29 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 Data Ascii: pixel + "'style='display:none; width:1px; height:1px' alt=''>" ); }); } } catch (err) { //console.log("[ICE] do nothing", err) } }
2024-05-21 09:22:02 UTC	320	IN	Data Raw: 74 65 78 74 75 61 6c 46 72 61 67 6d 65 6e 74 28 63 6f 6e 74 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 44 6f 63 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 72 61 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 73 74 79 6c 65 45 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 22 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 44 6f 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 74 79 6c 65 45 6c Data Ascii: textualFragment(content); iframeDoc.body.appendChild(frag); const styleElement = document.createElement("style"); styleElement.textContent = "body { margin: 0px !important; }"; iframeDoc.head.appendChild(styleEl
2024-05-21 09:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.9	50684	172.66.41.9	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	438	OUT	GET /action/doq.htm?pcode=utf-8&r=17162833181361 HTTP/1.1 Host: rt3007.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:02 UTC	375	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:02 GMT Content-Type: text/plain Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-cache,no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737feac872c44d-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.9	50675	3.67.74.124	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	617	OUT	GET /universal/v1?supply_id=k0cy4N0g HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:02 UTC	83	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.9	50681	208.93.169.131	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:01 UTC	731	OUT	GET /bh/rtset?pid=561516&ev=1&us_privacy=&rurl=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D5%26xu%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:02 UTC	1290	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-f9646d95d-n4srr cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=S5Wxb6bm0jrz;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 16-May-2025 09:22:02 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_S5Wxb6bm0jrz;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Fri, 16-May-2025 09:22:02 GMT;SameSite=None;Partitioned set-cookie: pb_rtb_ev=3-1rhg\|80p.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 21-May-2025 09:22:02 GMT;Max-Age=31536000;SameSite=None set-cookie: pb_rtb_ev_part=3-1rhg\|80p.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Wed, 21-May-2025 09:22:02 GMT;SameSite=None;Partitioned location: https://ssc-cms.33across.com/ps/?xi=5&xu=S5Wxb6bm0jrz&ev=1&us_privacy=&pid=561516 transfer-encoding: chunked server: Jetty(10.0.14) set-cookie: INGRESSCOOKIE=0f167cab1ae3fdea; path=/; HttpOnly; Secure; SameSite=None connection: close
2024-05-21 09:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.9	50696	35.244.193.51	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	736	OUT	GET /v1/envelope?pid=0015a0000344WLkAAM&src=ima&ver=1.10.0 HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:02 UTC	369	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Tue, 21 May 2024 09:22:01 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:02 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.9	50686	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	1211	OUT	GET /static-res/css/newsike.css?id=d37321569cba76b1fcd8 HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_54725HQVMF=GS1.1.1716283287.1.0.1716283287.0.0.0; _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC
2024-05-21 09:22:02 UTC	625	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:02 GMT Content-Type: text/css Content-Length: 51764 Connection: close CF-Cache-Status: EXPIRED Last-Modified: Tue, 21 May 2024 07:17:16 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0fvxTESBPI%2F6sYtJ72oyZPaftd5K8gW8mm8h1VMtfq1WuToMprOlaTY2EBc9qoZa6ejn%2FaPARBUz88MlcqDE4g08oBM%2BNiIAF9wXWsysmm3J9zYWSc3A2%2B4awhWkyHdwHhuNwF4d"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88737feb6a2e4302-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:02 UTC	744	IN	Data Raw: 2f 2a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 32 2e 32 2e 37 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 2a 2f 2f 2a 21 20 6d 6f 64 65 72 6e 2d 6e 6f 72 6d 61 6c 69 7a 65 20 76 31 2e 31 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6e 64 72 65 73 6f 72 68 75 73 2f 6d 6f 64 65 72 6e 2d 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 6d 6f 7a 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 2d 6f 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 74 61 62 2d 73 69 7a 65 3a 34 7d 62 6f 64 Data Ascii: /! tailwindcss v2.2.7 \| MIT License \| https://tailwindcss.com//! modern-normalize v1.1.0 \| MIT License \| https://github.com/sindresorhus/modern-normalize /html{-webkit-text-size-adjust:100%;line-height:1.15;-moz-tab-size:4;-o-tab-size:4;tab-size:4}bod
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e Data Ascii: em}sup{top:-.5em}table{border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearan
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 61 33 62 38 3b 6f 70 61 63 69 74 79 3a 31 7d 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 61 33 62 38 3b 6f 70 61 63 69 74 79 3a 31 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 2c 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 Data Ascii: laceholder,textarea:-ms-input-placeholder{color:#94a3b8;opacity:1}input::placeholder,textarea::placeholder{color:#94a3b8;opacity:1}[role=button],button{cursor:pointer}table{border-collapse:collapse}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 68 75 65 2d 72 6f 74 61 74 65 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 69 6e 76 65 72 74 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 73 61 74 75 72 61 74 65 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 73 65 70 69 61 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 64 72 6f 70 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 65 6d 70 74 79 2c 2f 2a 21 2a 2f 20 2f 2a 21 2a 2f 29 3b 2d 2d 74 77 2d 66 69 6c 74 65 72 3a 76 61 72 28 2d 2d 74 77 2d 62 6c 75 72 29 20 76 61 72 28 2d 2d 74 77 Data Ascii: / /!/);--tw-hue-rotate:var(--tw-empty,/!/ /!/);--tw-invert:var(--tw-empty,/!/ /!/);--tw-saturate:var(--tw-empty,/!/ /!/);--tw-sepia:var(--tw-empty,/!/ /!/);--tw-drop-shadow:var(--tw-empty,/!/ /!*/);--tw-filter:var(--tw-blur) var(--tw
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 29 20 30 20 30 20 30 20 63 61 6c 63 28 31 70 78 20 2b 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 36 33 65 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 73 68 61 64 6f 77 2c 30 20 30 20 23 30 30 30 30 29 3b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 7d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d Data Ascii: --tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);border-color:#2563eb;box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000);outline:2px solid transparent;outline-offset:2px}input::-moz-
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 32 35 36 33 65 62 3b 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 65 78 61 63 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 68 65 69 67 68 74 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 31 72 65 6d 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d Data Ascii: rder-width:1px;color:#2563eb;color-adjust:exact;display:inline-block;flex-shrink:0;height:1rem;padding:0;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;vertical-align:middle;width:1rem}[type=checkbox]{border-radius:0}
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 63 69 72 63 6c 65 20 63 78 3d 27 38 27 20 63 79 3d 27 38 27 20 72 3d 27 33 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 64 3a 66 6f 63 75 73 2c 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 64 3a 68 6f 76 65 72 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 63 68 65 63 6b 65 64 3a 66 6f 63 75 73 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 63 68 65 63 6b 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e Data Ascii: viewBox='0 0 16 16' fill='%23fff' xmlns='http://www.w3.org/2000/svg'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E")}[type=checkbox]:checked:focus,[type=checkbox]:checked:hover,[type=radio]:checked:focus,[type=radio]:checked:hover{background-color:curren
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 35 35 36 39 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 65 6d 7d 2e 70 72 6f 73 65 20 61 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 70 72 6f 73 65 20 73 74 72 6f 6e 67 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 70 72 6f 73 65 20 6f 6c 5b 74 79 70 65 3d 41 5d 7b 2d 2d 6c 69 73 74 2d 63 6f 75 6e 74 65 72 2d 73 74 79 6c 65 3a 75 70 70 65 72 2d 61 6c 70 68 61 7d 2e 70 72 6f 73 65 20 6f 6c 5b 74 79 70 65 3d 61 5d 7b 2d 2d Data Ascii: 5569;font-size:1.25em;line-height:1.6;margin-bottom:1.2em;margin-top:1.2em}.prose a{color:#0f172a;font-weight:500;text-decoration:underline}.prose strong{color:#0f172a;font-weight:600}.prose ol[type=A]{--list-counter-style:upper-alpha}.prose ol[type=a]{--
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 6f 70 65 6e 2d 71 75 6f 74 65 7d 2e 70 72 6f 73 65 20 62 6c 6f 63 6b 71 75 6f 74 65 20 70 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 63 6c 6f 73 65 2d 71 75 6f 74 65 7d 2e 70 72 6f 73 65 20 68 31 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 31 31 31 31 31 31 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 38 38 38 38 38 38 39 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 70 72 6f 73 65 20 68 32 7b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 Data Ascii: tent:open-quote}.prose blockquote p:last-of-type:after{content:close-quote}.prose h1{color:#0f172a;font-size:2.25em;font-weight:800;line-height:1.1111111;margin-bottom:.8888889em;margin-top:0}.prose h2{color:#0f172a;font-size:1.5em;font-weight:700;line-he
2024-05-21 09:22:02 UTC	1369	IN	Data Raw: 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 30 66 31 37 32 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 70 72 6f 73 65 20 74 68 65 61 64 20 74 68 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 37 31 34 32 38 36 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 37 31 34 32 38 36 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 37 31 34 32 38 36 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 70 72 6f 73 65 20 74 62 6f 64 79 20 74 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 65 32 65 38 66 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 7d 2e 70 72 6f 73 65 20 74 62 6f 64 79 20 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f Data Ascii: :1px;color:#0f172a;font-weight:600}.prose thead th{padding-bottom:.5714286em;padding-left:.5714286em;padding-right:.5714286em;vertical-align:bottom}.prose tbody tr{border-bottom-color:#e2e8f0;border-bottom-width:1px}.prose tbody tr:last-child{border-botto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.9	50691	143.204.98.115	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	534	OUT	GET /did-004d.min.js HTTP/1.1 Host: d-code.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:02 UTC	405	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 100549 Connection: close Date: Tue, 21 May 2024 02:48:43 GMT Cache-Control: public,max-age=86400 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fb8c0300277bd0137c1693d3d64ab550.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: JX-dLfVtEjb2Ep1D4_gXrg8viAZwsyN3DyYcKxnPnMprKPxNioW56g== Age: 23599
2024-05-21 09:22:02 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 69 51 64 3d 77 69 6e 64 6f 77 2e 6c 69 51 64 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 6c 69 51 64 2e 70 75 73 68 28 7b 22 67 6c 6f 62 61 6c 56 61 72 4e 61 6d 65 22 3a 22 6c 69 51 64 5f 64 69 64 5f 30 30 34 64 22 2c 22 64 69 73 74 72 69 62 75 74 6f 72 49 64 22 3a 22 64 69 64 2d 30 30 34 64 22 2c 22 64 65 66 61 75 6c 74 45 76 65 6e 74 44 65 6c 61 79 22 3a 31 30 30 30 2c 22 69 64 65 6e 74 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 43 6f 6e 66 69 67 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 64 69 64 2d 30 30 34 64 22 7d 2c 22 69 64 65 6e 74 69 66 69 65 72 73 54 6f 52 65 73 6f 6c 76 65 22 3a 22 5f 73 68 61 72 65 64 69 64 2c 73 5f 76 69 2c 74 72 63 5f 63 6f 6f 6b 69 65 5f 73 74 6f 72 61 67 65 2c 67 75 70 5f 61 6e Data Ascii: !function(){window.liQd=window.liQd\|\|[];window.liQd.push({"globalVarName":"liQd_did_004d","distributorId":"did-004d","defaultEventDelay":1000,"identityResolutionConfig":{"source":"did-004d"},"identifiersToResolve":"_sharedid,s_vi,trc_cookie_storage,gup_an
2024-05-21 09:22:02 UTC	16384	IN	Data Raw: 74 72 79 7b 72 65 74 75 72 6e 20 6e 3f 65 28 75 61 28 72 29 5b 30 5d 2c 72 5b 31 5d 29 3a 65 28 72 29 7d 63 61 74 63 68 28 65 29 7b 63 61 28 74 2c 22 74 68 72 6f 77 22 2c 65 29 7d 7d 2c 24 61 3d 64 61 2c 59 61 3d 6a 61 2c 5a 61 3d 58 6e 2c 74 75 3d 4c 61 2c 65 75 3d 71 61 2c 72 75 3d 55 61 2c 6e 75 3d 41 72 72 61 79 2c 6f 75 3d 4e 74 28 22 69 74 65 72 61 74 6f 72 22 29 2c 69 75 3d 21 31 3b 74 72 79 7b 76 61 72 20 61 75 3d 30 2c 75 75 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 21 61 75 2b 2b 7d 7d 2c 72 65 74 75 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 75 3d 21 30 7d 7d 3b 75 75 5b 6f 75 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 41 72 72 61 79 2e 66 72 6f 6d 28 75 75 Data Ascii: try{return n?e(ua(r)[0],r[1]):e(r)}catch(e){ca(t,"throw",e)}},$a=da,Ya=ja,Za=Xn,tu=La,eu=qa,ru=Ua,nu=Array,ou=Nt("iterator"),iu=!1;try{var au=0,uu={next:function(){return{done:!!au++}},return:function(){iu=!0}};uu[ou]=function(){return this},Array.from(uu
2024-05-21 09:22:02 UTC	16384	IN	Data Raw: 70 72 6f 74 6f 3a 21 30 2c 72 65 61 6c 3a 21 30 2c 66 6f 72 63 65 64 3a 21 30 7d 2c 7b 65 6d 70 6c 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 59 64 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 70 28 6f 2c 74 29 3f 28 72 3d 5a 64 28 6f 2c 74 29 2c 22 75 70 64 61 74 65 22 69 6e 20 65 26 26 28 72 3d 65 2e 75 70 64 61 74 65 28 72 2c 74 2c 6f 29 2c 65 70 28 6f 2c 74 2c 72 29 29 2c 72 29 3a 28 6e 3d 65 2e 69 6e 73 65 72 74 28 74 2c 6f 29 2c 65 70 28 6f 2c 74 2c 6e 29 2c 6e 29 7d 7d 29 3b 76 61 72 20 72 70 3d 4f 65 2c 6e 70 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 69 3d 72 3f 74 3a 74 2e 69 74 65 72 61 74 6f 72 2c 61 3d 74 2e 6e 65 78 74 3b 21 28 6e 3d 72 70 28 61 2c 69 29 29 Data Ascii: proto:!0,real:!0,forced:!0},{emplace:function(t,e){var r,n,o=Yd(this);return tp(o,t)?(r=Zd(o,t),"update"in e&&(r=e.update(r,t,o),ep(o,t,r)),r):(n=e.insert(t,o),ep(o,t,n),n)}});var rp=Oe,np=function(t,e,r){for(var n,o,i=r?t:t.iterator,a=t.next;!(n=rp(a,i))
2024-05-21 09:22:02 UTC	5214	IN	Data Raw: 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 7d 29 7d 29 29 7d 2c 7b 74 6f 4a 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 4c 6d 28 74 68 69 73 29 2c 72 3d 54 6d 28 65 2c 22 6e 75 6d 62 65 72 22 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 72 7c 7c 69 73 46 69 6e 69 74 65 28 72 29 3f 22 74 6f 49 53 4f 53 74 72 69 6e 67 22 69 6e 20 65 7c 7c 22 44 61 74 65 22 21 3d 3d 50 6d 28 65 29 3f 65 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 3a 52 6d 28 4e 6d 2c 65 29 3a 6e 75 6c 6c 7d 7d 29 3b 76 61 72 20 46 6d 3d 43 65 2c 4d 6d 3d 71 72 3b 46 6d 2e 4a 53 4f 4e 7c 7c 28 46 6d 2e 4a 53 4f 4e 3d 7b 73 74 72 69 6e 67 69 66 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 7d 29 3b 76 61 Data Ascii: String:function(){return 1}})}))},{toJSON:function(t){var e=Lm(this),r=Tm(e,"number");return"number"!=typeof r\|\|isFinite(r)?"toISOString"in e\|\|"Date"!==Pm(e)?e.toISOString():Rm(Nm,e):null}});var Fm=Ce,Mm=qr;Fm.JSON\|\|(Fm.JSON={stringify:JSON.stringify});va
2024-05-21 09:22:02 UTC	16384	IN	Data Raw: 20 7a 77 28 74 2c 65 2c 72 29 7b 69 66 28 72 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 65 7c 7c 28 6e 7c 7c 28 6e 3d 57 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 29 2e 63 61 6c 6c 28 65 2c 30 2c 6f 29 29 2c 6e 5b 6f 5d 3d 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 51 79 28 74 29 2e 63 61 6c 6c 28 74 2c 6e 7c 7c 57 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 29 2e 63 61 6c 6c 28 65 29 29 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 3b 76 61 72 20 47 77 3d 22 6c 69 5f 65 72 72 6f 72 73 Data Ascii: zw(t,e,r){if(r\|\|2===arguments.length)for(var n,o=0,i=e.length;o<i;o++)!n&&o in e\|\|(n\|\|(n=Wy(Array.prototype).call(e,0,o)),n[o]=e[o]);return Qy(t).call(t,n\|\|Wy(Array.prototype).call(e))}"function"==typeof SuppressedError&&SuppressedError;var Gw="li_errors
2024-05-21 09:22:02 UTC	16384	IN	Data Raw: 77 28 7b 7d 2c 72 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6e 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2c 61 3d 65 2e 67 65 74 43 6f 6f 6b 69 65 28 69 29 7c 7c 65 2e 67 65 74 44 61 74 61 46 72 6f 6d 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 69 29 3b 69 66 28 61 29 7b 76 61 72 20 75 3d 52 62 28 61 62 2e 73 61 66 65 54 6f 53 74 72 69 6e 67 28 61 29 29 3b 72 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 69 2c 76 61 6c 75 65 3a 75 2e 73 74 72 69 6e 67 57 69 74 68 6f 75 74 52 61 77 45 6d 61 69 6c 73 7d 29 2c 6e 3d 51 79 28 6e 29 2e 63 61 6c 6c 28 6e 2c 75 2e 68 61 73 68 65 73 46 72 6f 6d 4f 72 69 67 69 6e 61 6c 53 74 72 69 6e 67 29 7d 7d 72 65 74 75 72 6e 7b 72 65 74 Data Ascii: w({},r),function(t,e){for(var r=[],n=[],o=0;o<t.length;o++){var i=t[o],a=e.getCookie(i)\|\|e.getDataFromLocalStorage(i);if(a){var u=Rb(ab.safeToString(a));r.push({name:i,value:u.stringWithoutRawEmails}),n=Qy(n).call(n,u.hashesFromOriginalString)}}return{ret
2024-05-21 09:22:02 UTC	13415	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 45 28 74 2c 65 2c 72 2c 6e 29 7d 29 29 3a 74 45 28 6f 2c 65 2c 72 2c 6e 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 6e 2e 65 6d 69 74 45 72 72 6f 72 57 69 74 68 4d 65 73 73 61 67 65 28 22 4c 43 50 75 73 68 22 2c 22 46 61 69 6c 65 64 20 73 65 6e 64 69 6e 67 20 61 6e 20 65 76 65 6e 74 22 2c 74 29 7d 7d 28 65 2c 66 2c 6c 2c 6e 29 7d 3b 72 65 74 75 72 6e 7b 70 75 73 68 3a 70 2c 66 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 7b 7d 29 7d 2c 70 65 6f 70 6c 65 56 65 72 69 66 69 65 64 49 64 3a 6c 2e 70 65 6f 70 6c 65 56 65 72 69 66 69 65 64 49 64 2c 72 65 61 64 79 3a 21 30 2c 72 65 73 6f 6c 76 65 3a 64 2e 72 65 73 6f 6c 76 65 2e 62 69 6e 64 28 64 29 2c 72 65 73 6f 6c 75 74 69 6f 6e 43 61 6c 6c 55 72 6c 3a 64 Data Ascii: ){return tE(t,e,r,n)})):tE(o,e,r,n)}))}catch(t){n.emitErrorWithMessage("LCPush","Failed sending an event",t)}}(e,f,l,n)};return{push:p,fire:function(){return p({})},peopleVerifiedId:l.peopleVerifiedId,ready:!0,resolve:d.resolve.bind(d),resolutionCallUrl:d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.9	50697	185.64.190.81	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	2203	OUT	GET /AdServer/SPug?p=156872&pmc=1&pr=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:02 UTC	518	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 21 May 2024 09:22:02 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716283322; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:22:02 GMT; path=/ Location: https://router.infolinks.com/dyn/pbm-usync?uid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.9	50700	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	676	OUT	GET /dyn/apn-usync?user_id=6403784576581203868 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:02 UTC	484	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: ANUSERCOOKIE=6403784576581203868; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:02 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:02 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737fed1fb141d2-EWR
2024-05-21 09:22:02 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.9	50703	34.98.64.218	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	780	OUT	GET /w/1.0/cm?cc=1&id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:02 UTC	569	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321; Version=1; Expires=Wed, 21-May-2025 09:22:02 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://router.infolinks.com/dyn/ox-usync?uid=fb3b363d-dfa9-471c-8d65-e5cb71fd98c8 Date: Tue, 21 May 2024 09:22:02 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.9	50701	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	620	OUT	GET /bounce HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1
2024-05-21 09:22:02 UTC	351	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:22:02 GMT vary: Accept-Encoding access-control-allow-origin: https://custommapposter.com vary: Origin access-control-allow-credentials: true content-type: text/plain;charset=utf-8 transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:22:02 UTC	36	IN	Data Raw: 31 45 0d 0a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 7d 0d 0a Data Ascii: 1E{"bounce":{"setCookie":false}}
2024-05-21 09:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.9	50705	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	686	OUT	GET /dyn/iqm-us?uid=e714687a-b06b-42cd-94cc-eea520c604e9 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:02 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:02 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:02 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737feeecc20f7f-EWR
2024-05-21 09:22:02 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.9	50704	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	688	OUT	GET /dyn/VR-usync?uid=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512
2024-05-21 09:22:02 UTC	571	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:02 GMT Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private set-cookie: VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:02 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:02 GMT location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3399&partner_device_id=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88737feefb2772a1-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.9	50702	162.19.138.119	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	561	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:03 UTC	381	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://custommapposter.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:22:02 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:22:03 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 6d 57 35 33 73 55 6a 2b 58 39 51 66 30 32 76 59 78 78 68 57 73 77 3d 3d 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"lb":"mW53sUj+X9Qf02vYxxhWsw=="}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.9	50698	13.32.121.27	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	877	OUT	GET /profiles_engine/ProfilesEngineServlet?at=39&mi=10&dpi=328512134&pt=17&dpn=1&jsver=5.36&iiqidtype=2&iiqpcid=0248b5aa-e6c9-4839-aaab-d0d2fd63d9d2&iiqpciddate=1716283289724&iiqcallcount=0&iiqfailcount=0&iiqnodata=false&iiqlocalstorageenabled=true&tsrnd=759_1716283320354&fbp=137264047&cttl=43200000&rrtt=0&dud=0&abtg=A&iiqppcc=0 HTTP/1.1 Host: api.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:03 UTC	1203	IN	HTTP/1.1 200 Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Tue, 21 May 2024 09:22:03 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:02 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Access-Control-Allow-Origin: https://custommapposter.com Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 3600 Access-Control-Allow-Headers: Content-Type, Accept, X-Requested-With, remember-me, DNT,X-CustomHeader,Keep-Alive,User-Agent,If-Modified-Since,Cache-Control Set-Cookie: intentIQCDate=1716283323002; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:03 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip X-Cache: Miss from cloudfront Via: 1.1 6fd3ab2be93b19c970fb371964d46d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Ia0H2EKwtVDI9FM0DrcQPsshbqNBiXqqT1ft8WcDhxJx9wbK51lWgA==
2024-05-21 09:22:03 UTC	1474	IN	Data Raw: 35 62 62 0d 0a 7b 22 61 64 74 22 3a 31 2c 22 63 74 22 3a 32 2c 22 64 61 74 61 22 3a 22 75 44 73 6f 65 46 49 75 4d 58 6b 4c 36 32 54 4a 64 77 59 6b 6d 67 42 2b 52 4c 44 6f 66 75 74 4f 72 35 52 63 79 2b 46 67 68 50 6c 37 71 6e 49 56 76 38 45 70 6f 67 4b 44 74 78 35 48 74 6c 63 4f 70 32 75 6f 6f 55 53 70 34 58 41 54 37 75 77 4c 32 2f 45 73 4f 62 31 44 50 4b 54 4f 32 59 5a 55 42 50 37 75 47 4f 46 4b 70 35 33 6f 30 6a 38 75 69 63 63 46 52 54 4e 34 4c 6d 6e 57 57 47 4d 34 41 6d 45 66 66 77 70 79 6b 30 52 64 55 46 52 6c 5a 4f 62 5a 72 4c 79 78 6c 46 74 59 4d 45 6e 64 6c 48 43 61 51 44 4d 71 75 54 67 6d 62 6c 63 44 34 34 49 69 32 54 51 49 4c 61 61 38 37 6e 71 51 54 2b 41 62 61 33 73 6b 31 4c 61 72 61 6e 48 6a 6a 71 39 54 46 62 4e 33 43 58 68 4c 68 71 65 2b 4f 61 Data Ascii: 5bb{"adt":1,"ct":2,"data":"uDsoeFIuMXkL62TJdwYkmgB+RLDofutOr5Rcy+FghPl7qnIVv8EpogKDtx5HtlcOp2uooUSp4XAT7uwL2/EsOb1DPKTO2YZUBP7uGOFKp53o0j8uiccFRTN4LmnWWGM4AmEffwpyk0RdUFRlZObZrLyxlFtYMEndlHCaQDMquTgmblcD44Ii2TQILaa87nqQT+Aba3sk1LaranHjjq9TFbN3CXhLhqe+Oa
2024-05-21 09:22:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.9	50713	35.244.193.51	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	724	OUT	GET /v1/ppid?pid=0015a0000344WLkAAM&ver=1.10.0 HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:02 UTC	314	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com content-type: application/json Content-Length: 121 via: 1.1 google date: Tue, 21 May 2024 09:22:02 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:02 UTC	121	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 74 72 75 65 2c 22 64 61 74 61 22 3a 7b 22 65 69 64 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 61 64 6e 78 73 2e 63 6f 6d 22 2c 22 75 69 64 73 22 3a 5b 7b 22 69 64 22 3a 22 36 34 30 33 37 38 34 35 37 36 35 38 31 32 30 33 38 36 38 22 2c 22 65 78 74 22 3a 7b 22 73 74 79 70 65 22 3a 22 70 70 75 69 64 22 7d 7d 5d 7d 5d 7d 7d Data Ascii: {"succeeded":true,"data":{"eids":[{"source":"adnxs.com","uids":[{"id":"6403784576581203868","ext":{"stype":"ppuid"}}]}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.9	50709	64.74.236.223	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	709	OUT	GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=TZvXYgcPoPgLT8-WUnBN
2024-05-21 09:22:02 UTC	588	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 90 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://router.infolinks.com/dyn/zmn-usync?uid=TZvXYgcPoPgLT8-WUnBN P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=TZvXYgcPoPgLT8-WUnBN; Path=/; Domain=zemanta.com; Expires=Wed, 21 May 2025 09:22:02 GMT; Max-Age=31536000; Secure; SameSite=None Date: Tue, 21 May 2024 09:22:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-21 09:22:02 UTC	90	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 2f 64 79 6e 2f 7a 6d 6e 2d 75 73 79 6e 63 3f 75 69 64 3d 54 5a 76 58 59 67 63 50 6f 50 67 4c 54 38 2d 57 55 6e 42 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://router.infolinks.com/dyn/zmn-usync?uid=TZvXYgcPoPgLT8-WUnBN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.9	50712	76.223.111.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:02 UTC	721	OUT	GET /getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=929149604929207739274; tluid=929149604929207739274
2024-05-21 09:22:03 UTC	664	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:02 GMT Content-Length: 0 Connection: close Location: https://router.infolinks.com/dyn/tplift?uid=929149604929207739274 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=929149604929207739274; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:22:02 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=929149604929207739274; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:22:02 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.9	50714	69.166.1.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	808	OUT	GET /us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxnp
2024-05-21 09:22:03 UTC	769	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:03 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 location: https://router.infolinks.com/dyn/sonobi-usync?uid=054b4136-01f6-45be-b12f-751883821122 set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:22:02 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxnv; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.9	50720	34.117.239.71	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	780	OUT	GET /match?liv=h&us_privacy=&bidder_id=2&external_user_id=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:03 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 21 May 2024 09:22:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:03 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.9	50717	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	746	OUT	GET /ps/?xi=5&xu=S5Wxb6bm0jrz&ev=1&us_privacy=&pid=561516 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:03 UTC	667	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:22:03 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP016 location: https://events-ssc.33across.com/match?bidder_id=5&external_user_id=S5Wxb6bm0jrz&ts=1716283323&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Tue, 21 May 2024 09:22:02 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.9	50719	67.202.105.23	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	853	OUT	GET /ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1718875322%26external_user_id%3Dd7c589fa-248b-42e0-8bc4-ffb4bdc33d5c HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:03 UTC	658	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:22:03 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP003 location: https://cms-xch-chicago.33across.com/match?bidder_id=102&ttl=1718875322&external_user_id=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c content-length: 0 date: Tue, 21 May 2024 09:22:02 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.9	50716	34.254.84.230	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	700	OUT	GET /cookie-sync/33across?us_privacy= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAJq3k7MmM8AABT0lzVYQg; bitoIsSecure=ok
2024-05-21 09:22:03 UTC	408	IN	HTTP/1.1 303 See Other Date: Tue, 21 May 2024 09:22:03 GMT location: https://cms-xch.33across.com/match?external_user_id=AAJq3k7MmM8AABT0lzVYQg&bidder_id=85 Server: gunicorn set-cookie: bito=AAJq3k7MmM8AABT0lzVYQg; Domain=bidr.io; expires=Fri, 20 Jun 2025 05:22:03 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.9	50138	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	704	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2580 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:03 UTC	2580	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 22 3a Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat":40.7123,"lon":
2024-05-21 09:22:04 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:22:04 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:04 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 31 61 61 63 30 64 63 35 2d 63 33 64 63 2d 34 33 66 38 2d 39 35 36 63 2d 66 30 36 31 38 34 35 64 30 65 62 62 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"1aac0dc5-c3dc-43f8-956c-f061845d0ebb","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.9	49793	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	660	OUT	POST /api/v2 HTTP/1.1 Host: e.serverbid.com Connection: keep-alive Content-Length: 820 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:03 UTC	820	OUT	Data Raw: 7b 22 70 6c 61 63 65 6d 65 6e 74 73 22 3a 5b 7b 22 64 69 76 4e 61 6d 65 22 3a 22 32 30 66 61 31 31 31 63 62 37 66 39 32 39 22 2c 22 61 64 54 79 70 65 73 22 3a 5b 34 5d 2c 22 75 6e 69 74 4e 61 6d 65 22 3a 22 63 6e 73 6d 62 6c 2d 61 75 64 69 6f 2d 37 32 38 78 39 30 2d 73 6c 69 64 65 72 22 2c 22 75 6e 69 74 49 64 22 3a 31 30 30 34 38 2c 22 73 69 74 65 49 64 22 3a 32 30 30 30 30 33 33 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 39 39 36 39 2c 22 7a 6f 6e 65 49 64 73 22 3a 5b 32 30 30 35 30 32 33 5d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 6e 75 6c 6c 7d 5d 2c 22 74 69 6d 65 22 3a 31 37 31 36 32 38 33 33 32 32 33 39 31 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 Data Ascii: {"placements":[{"divName":"20fa111cb7f929","adTypes":[4],"unitName":"cnsmbl-audio-728x90-slider","unitId":10048,"siteId":2000033,"networkId":9969,"zoneIds":[2005023],"bidfloor":null}],"time":1716283322391,"url":"https://custommapposter.com/","referrer":nu
2024-05-21 09:22:04 UTC	535	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: application/json content-length: 16 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:04 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:03 GMT connection: close
2024-05-21 09:22:04 UTC	16	IN	Data Raw: 7b 22 64 65 63 69 73 69 6f 6e 73 22 3a 7b 7d 7d Data Ascii: {"decisions":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.9	49792	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:03 UTC	661	OUT	POST /api/v2 HTTP/1.1 Host: e.serverbid.com Connection: keep-alive Content-Length: 1931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:03 UTC	1931	OUT	Data Raw: 7b 22 70 6c 61 63 65 6d 65 6e 74 73 22 3a 5b 7b 22 64 69 76 4e 61 6d 65 22 3a 22 34 36 62 31 37 66 65 33 35 36 32 33 61 35 31 22 2c 22 61 64 54 79 70 65 73 22 3a 5b 35 2c 36 2c 34 33 5d 2c 22 75 6e 69 74 4e 61 6d 65 22 3a 22 63 6e 73 6d 62 6c 2d 61 75 64 69 6f 2d 33 30 30 78 32 35 30 2d 73 6c 69 64 65 72 22 2c 22 75 6e 69 74 49 64 22 3a 31 30 30 34 37 2c 22 73 69 74 65 49 64 22 3a 32 30 30 30 30 33 33 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 39 39 36 39 2c 22 7a 6f 6e 65 49 64 73 22 3a 5b 32 30 30 35 30 32 34 5d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 6e 75 6c 6c 2c 22 76 69 64 65 6f 22 3a 7b 22 70 6f 73 22 3a 33 2c 22 63 6f 6e 74 65 78 74 22 3a 22 6f 75 74 73 74 72 65 61 6d 22 2c 22 70 6c 61 79 65 72 53 69 7a 65 22 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 22 70 Data Ascii: {"placements":[{"divName":"46b17fe35623a51","adTypes":[5,6,43],"unitName":"cnsmbl-audio-300x250-slider","unitId":10047,"siteId":2000033,"networkId":9969,"zoneIds":[2005024],"bidfloor":null,"video":{"pos":3,"context":"outstream","playerSize":[[300,250]],"p
2024-05-21 09:22:04 UTC	535	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: application/json content-length: 16 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:04 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:03 GMT connection: close
2024-05-21 09:22:04 UTC	16	IN	Data Raw: 7b 22 64 65 63 69 73 69 6f 6e 73 22 3a 7b 7d 7d Data Ascii: {"decisions":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.9	50723	18.211.112.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	691	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZkxnuNHM6HMAAHezAHb..QAA%26983&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:04 UTC	529	IN	HTTP/1.1 303 See Other Date: Tue, 21 May 2024 09:22:04 GMT Content-Length: 0 Connection: close Location: /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZkxnuNHM6HMAAHezAHb..QAA%26983&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=370113415ce14bfc98e1fd71fab41459 Set-Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459; Max-Age=63072000; Expires=Thu, 21 May 2026 09:22:04 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.9	50732	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	668	OUT	POST /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 2014 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#1
2024-05-21 09:22:04 UTC	2014	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 65 37 37 33 34 37 63 2d 32 36 66 34 2d 34 37 30 39 2d 62 32 32 65 2d 65 61 65 65 37 36 34 34 64 63 66 30 22 2c 22 72 65 71 75 65 73 74 43 6f 75 6e 74 22 3a 31 2c 22 72 6f 6c 65 22 3a 22 6c 65 61 64 65 72 22 2c 22 63 61 63 68 65 49 64 22 3a 22 37 30 33 33 30 33 38 38 35 34 32 31 30 31 38 33 22 2c 22 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 73 6f 75 72 63 65 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 36 35 22 2c 22 70 61 72 74 6e 65 72 22 3a 31 30 31 33 2c 22 76 22 3a 22 31 2e 30 2e 36 35 22 2c 22 6f 22 3a 22 61 70 69 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 Data Ascii: {"requests":[{"requestId":"be77347c-26f4-4709-b22e-eaee7644dcf0","requestCount":1,"role":"leader","cacheId":"7033038854210183","refresh":true,"sourceVersion":"1.0.65","partner":1013,"v":"1.0.65","o":"api","tml":"https://custommapposter.com/article/top/926
2024-05-21 09:22:04 UTC	584	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:22:04 GMT vary: Accept-Encoding p3p: CP="CAO PSA OUR" set-cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#2; Path=/; Domain=id5-sync.com; Expires=Mon, 19 Aug 2024 09:22:04 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://custommapposter.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:22:04 UTC	1177	IN	Data Raw: 34 39 32 0d 0a 7b 22 67 65 6e 65 72 69 63 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 67 44 51 65 69 5f 41 48 78 6d 41 55 35 7a 51 39 51 37 34 79 73 56 4d 53 72 6c 73 54 39 6c 75 35 75 2d 32 41 50 66 6f 65 43 4b 64 4f 30 4d 41 43 54 72 5f 37 73 56 52 4a 50 4c 5a 71 65 31 34 6d 79 37 69 6a 6c 33 30 35 79 72 38 33 4f 7a 57 4d 71 41 73 56 2d 75 50 46 62 62 78 33 35 31 6b 57 31 78 6e 55 4b 78 6a 74 52 72 39 79 71 4f 65 6e 59 47 72 50 5f 42 52 70 62 4b 31 6d 4a 73 35 56 74 68 79 76 6c 68 34 45 6a 77 6b 4c 36 61 6d 77 5f 63 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 31 54 30 39 3a 32 31 3a 33 33 2e 36 30 35 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 Data Ascii: 492{"generic":{"signature":"ID5_AgDQei_AHxmAU5zQ9Q74ysVMSrlsT9lu5u-2APfoeCKdO0MACTr_7sVRJPLZqe14my7ijl305yr83OzWMqAsV-uPFbbx351kW1xnUKxjtRr9yqOenYGrP_BRpbK1mJs5Vthyvlh4EjwkL6amw_c","created_at":"2024-05-21T09:21:33.605Z","id5_consent":true,"original_uid
2024-05-21 09:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.9	50734	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1647 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:04 UTC	1647	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 32 32 33 37 31 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283322371,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:04 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:04 GMT Content-Type: application/json Content-Length: 83 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:22:04 UTC	83	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 37 33 66 64 64 30 30 61 64 65 32 38 39 66 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"73fdd00ade289f","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.9	50735	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3584 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=5_1716283291_1716283310
2024-05-21 09:22:04 UTC	3584	OUT	Data Raw: 7b 22 61 22 3a 22 65 33 32 35 37 38 37 35 2d 32 38 32 32 2d 34 35 34 37 2d 39 66 65 36 2d 36 38 31 31 39 66 33 64 66 31 39 62 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"e3257875-2822-4547-9fe6-68119f3df19b","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:04 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1074 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:04 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=6_1716283291_1716283324; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:04 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 5 connection: close
2024-05-21 09:22:04 UTC	1074	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 70 45 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 5a 54 4d 79 4e 54 63 34 4e 7a 55 74 4d 6a 67 79 4d 69 30 30 4e 54 51 33 4c 54 6c 6d 5a 54 59 74 4e 6a 67 78 4d Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CpECShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkZTMyNTc4NzUtMjgyMi00NTQ3LTlmZTYtNjgxM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.9	50740	104.207.133.222	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	1337	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1313 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=yS012ZGIE88Nlt5QAIWU5JEpMIAkGRnN7AWV%2Fdg9ZeF4WBWAgOXF9dw8MelRCU2hxbnBraRoOfApBAmkgYn8sJl0KeF9BV2d4O3d6cw0aYk5CBmYgbHd5dglZLVpAB2Z1bn9%2FIwABfl1WGXN3aXAocwkLdl9HBWZ2b397dgsJK1VCVGdjdmV%2Fdg9ZeFwXU2UibiF7JAlaeVoXAmQjbHFraRoOfVsVAGlwYnYoJg4MfFtAAWl3PHQsIwsaYk5CBmYgbHYvcQlZLVpAB2Z1bn9%2FIwBdLA5WGXN3aXcvcQoKKl5DAzUjOCF%2BfQwNLQ5NDTNjdmV%2Fdg9ZewoWVmJyanB%2BcAAKfV9FUGh3YnFraRoOfQgSUWN0aHJ9Jw9ZLA5EBzdwb3R%2FcA4aYk5CBmIibXEscw8MeFlFAmYgOX8vIVoBK11WaH1jOSg8K0wadFxYFzYlKjVrf0NFYk4HUCIyMygnZwIaeg8SAWQlO3Vkd1xdKkFEBTUld3Erdl0VKwhNAWAlOXJwfQwMbEBWVj4vNCIqMVFXICUQF2tjbHIrdwkJdwkSVGdyOCQrcVkPfghBDTMjeDo%3D
2024-05-21 09:22:04 UTC	1313	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 33 32 32 34 30 35 2c 22 62 69 64 49 64 22 3a 22 32 34 63 63 39 38 31 64 66 65 64 31 32 39 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 37 36 36 30 66 30 39 35 2d 38 35 36 37 2d 34 65 31 33 2d 62 32 36 36 2d 65 64 65 37 39 63 31 66 37 61 31 39 5f 31 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 37 32 38 78 39 30 22 5d 2c 22 75 6e 69 71 75 65 44 65 61 6c 49 64 22 3a 22 5f 31 Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2F","uqs":"","cb":1716283322405,"bidId":"24cc981dfed129","referrer":null,"adUnitCode":"mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["728x90"],"uniqueDealId":"_1
2024-05-21 09:22:04 UTC	1229	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=YVO11bx2jWYn22NZGVpCCyUtAFdAPXhYIxBcZG4PBAAsalMZUVxja1kGBnZsBEECXmB7QhAEfDxXTwoLb2ELUVd8bFFNUFxuOF4BBHt4TloEWWA4WAICfWsDGwReZW5aBgp4PFpBAlt1dUwEAXk%2BUkkGXW46XQQAfGtVG1MJNmFeUwVsdkBOAV02b18BCn1pUk8FX29rXQEDK2NUGQRIe3tYAQUvbFIbVF40bQgAU384VU5RXWI7WAQQYnhUSwULYmFfCgMvOVRMAF1jbVYEVH0%2FBEsQRnVvXQVTeGsETAMLNG9aAAV6blpOVFIyOwwQHmxsUUhUXmVrCgAFeD4AGlRdb21bUVB3YgBaHkhhagpUVnxvUE0GCGA4DFACfDxTTQFcYm9MHhB4aVUZBww1Ol0BAnltV0AAWWRoCwsEdmxAVBBcZGoNBQQrbFVMBF9mbllTUXY8BhoLD2Z7Mx4QLTUXFkZIbWlCEFUqKhBaCBEqdUxBVz0pCxdcSG17WlFUem8GGQBHZT0LVh9%2BagYcH1w1agsfVypjVklWCWJgVgYGbHZAG10EOTwNRlshNCscEFB1b1tQAH9rWx1UC2FqDFFQejtVSFZfbzsMEE8%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:37:04 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 13982 date: Tue, 21 May 2024 09:22:04 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:04 UTC	8552	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 0b 93 a3 48 92 2e fa 57 6a cb ac 7a 66 6c a7 ba 00 a1 14 f4 4e cd 5a 3c 08 1e 02 24 1e c1 43 b7 d7 da 24 40 c1 4b 42 29 54 89 60 6c fe fb b1 40 99 d5 d5 3d 33 e7 ec 9e bd 76 cf d9 bd 9d 66 69 99 92 02 c2 c3 c3 fd 73 f7 cf 23 c9 bf bc bf 16 fd 97 f6 d6 bf ff e1 ff f9 cb fb ac eb 9a aa e0 bf ff db 1f df ef f3 f7 3f bc ff d3 3f 7d fc f8 4e bb 67 e5 fe cc 8a 1f de 6d 2e c5 39 79 87 83 ad 89 7f 78 b7 5c ac 44 f1 69 21 ac de 21 9f bf 5e 88 8a 28 3f fd b4 92 94 bb 2a bc fb f8 f1 cf 7f ca ab 97 77 55 fe f9 77 87 62 9f 75 e7 9f 9e 9e 54 49 5d fe ee 5d 7f 1b db e2 f3 ef 2e 5d 5f dd aa ee fc c3 fe d0 77 ed 97 5b f1 2f 6d 71 bc fd 20 5c ee ef fe e5 d6 5d f8 2f ff f2 52 f5 d5 a1 6a ab db f8 43 59 e5 79 71 fe 97 df fd f9 4f d5 89 bd Data Ascii: H.WjzflNZ<$C$@KB)T`l@=3vfis#??}Ngm.9yx\Di!!^(?*wUwbuTI]].]_w[/mq \]/RjCYyqO
2024-05-21 09:22:04 UTC	5430	IN	Data Raw: 30 6c a8 bb 68 c1 73 d4 9b 42 b5 b9 26 5f 03 e4 81 4d d8 95 5f 31 a8 5a 26 47 7d f7 44 db 4b 8d 82 76 0f 17 02 b0 a7 dd 82 cb 88 ab b9 d7 11 98 55 33 f7 3a 62 63 e9 1b 89 3b f7 36 c8 c0 a4 9f b9 c1 68 01 5a 41 88 17 d1 1e 2c 18 59 f3 55 c2 98 29 53 52 89 07 80 e6 55 3e 01 26 6f f4 89 ee 1e 3b 31 f0 fc 9d 65 1b 23 64 f6 a6 92 cd 0d e2 0c e7 57 2e 2c b2 c2 b7 aa 9c f3 10 26 b1 a7 5c 85 c3 fd 9c 24 c3 1a 8e 0a 29 26 70 a3 40 9c b3 1b 88 e4 47 f7 83 d7 a3 f1 9c a9 f8 45 4d 6f 80 f3 18 c1 25 05 81 8c 1f b1 23 12 79 15 d3 38 c9 37 dd d1 b9 3e 9c 34 de 15 bb 6a 1c e9 fd 47 05 0b 81 63 db d4 c3 9b 61 a9 b9 3e 6b 90 df ad c3 5a d1 cc 3b 5b 05 40 a3 76 9d 0a 61 95 06 5e 39 9c 4c bf 75 8a d7 2a 5f 7f e3 c2 7c ce 6d 51 f1 d1 73 2a 93 4c 7a 8d c7 bc 3b 3b 7a da 1a 65 Data Ascii: 0lhsB&_M_1Z&G}DKvU3:bc;6hZA,YU)SRU>&o;1e#dW.,&\$)&p@GEMo%#y87>4jGca>kZ;[@va^9Lu_\|mQsLz;;ze

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.9	50738	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	3893	OUT	GET /trinity.json?key_maker=%7B%22389b7d7e4a487d6%22%3A%22177369c437c672237248%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%2239d5c0b6874c905%22%3A%22dcc4cd9596e80d497120%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%2C%22406888e64c6a13d%22%3A%22d23fc2fbe929165f22f9%7C300x250%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=dcd5eb8c-11a2-42e1-8cea-746c54313610&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%2260328105-6223-47cb-90cb-ab02a4522e65%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommappost [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxnv
2024-05-21 09:22:04 UTC	824	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:22:04 GMT content-type: application/json content-length: 468 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:22:03 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; expires=Wed, 21 May 2025 09:22:03 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close
2024-05-21 09:22:04 UTC	468	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 33 38 39 62 37 64 37 65 34 61 34 38 37 64 36 22 3a 7b 7d 2c 22 33 39 64 35 63 30 62 36 38 37 34 63 39 30 35 22 3a 7b 7d 2c 22 34 30 36 38 38 38 65 36 34 63 36 61 31 33 64 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 33 34 65 38 34 32 32 30 2d 65 30 66 62 2d 34 36 31 62 2d 39 65 63 30 2d 37 66 38 32 34 37 33 63 39 35 30 38 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 Data Ascii: {"slots":{"389b7d7e4a487d6":{},"39d5c0b6874c905":{},"406888e64c6a13d":{}},"sbi_dc":"iad-2-","pv":"34e84220-e0fb-461b-9ec0-7f82473c9508","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.9	50737	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	1422	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283322453&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.D%23repeatable-4&maxw=300&maxh=600&si=1105835&pi=3&bf=300x250%2C160x600%2C300x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:04 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:04 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 645 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:04 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:04 UTC	645	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.9	50739	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	849	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 949 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAMgAygDMK7PsbIGOANAA0gDEK7PsbIGGAI.
2024-05-21 09:22:04 UTC	949	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 32 32 39 64 65 33 34 65 37 39 33 36 35 30 37 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 67 70 69 64 22 3a 22 2f 32 30 38 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"229de34e7936507","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":1,"gpid":"/208
2024-05-21 09:22:04 UTC	1385	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 139 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a0f4ad3f-5811-4b89-b705-9e437bcdfe0d Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:04 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:04 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:04 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:04 UTC	139	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 32 32 39 64 65 33 34 65 37 39 33 36 35 30 37 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 38 36 33 37 30 35 31 30 38 38 37 33 34 39 34 39 39 32 36 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"229de34e7936507","tag_id":32542723,"auction_id":"8637051088734949926","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.9	50736	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	2129	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 4132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:04 UTC	4132	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 33 32 32 34 38 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 35 37 37 61 61 31 36 63 63 37 65 61 34 36 33 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 44 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 44 23 72 65 70 65 Data Ascii: {"id":"1716283322482","at":1,"cur":["USD"],"imp":[{"id":"577aa16cc7ea463","tagid":"1433179","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.D"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.D#repe
2024-05-21 09:22:04 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:22:03 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.9	50747	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1135 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAMgAygDMK7PsbIGOANAA0gDEK7PsbIGGAI.
2024-05-21 09:22:04 UTC	1135	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 35 31 39 30 63 65 31 32 32 32 31 38 32 32 34 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250},{"width":160,"height":600},{"width":300,"height":600}],"primary_size":{"width":300,"height":250},"ad_types":["video","banner"],"uuid":"5190ce122218224","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":
2024-05-21 09:22:04 UTC	1567	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 144 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 965b9ece-dd9e-4dd4-aa90-437012ba54ba Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:04 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChkI__eVARAKGAQgBCgEMLzPsbIGOARABEgEELzPsbIGGAM.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:04 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:04 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:04 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:04 UTC	144	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 35 31 39 30 63 65 31 32 32 32 31 38 32 32 34 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 33 35 38 35 39 37 34 35 34 39 36 39 38 36 34 30 34 39 30 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 35 30 31 34 34 34 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"5190ce122218224","tag_id":32542723,"auction_id":"3585974549698640490","nobid":true,"ad_profile_id":501444}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.9	50760	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:04 UTC	1685	OUT	Data Raw: 7b 22 69 64 22 3a 22 61 66 61 30 62 33 61 38 2d 37 63 32 64 2d 34 61 33 62 2d 62 31 64 39 2d 36 38 65 63 65 33 34 66 30 36 66 63 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 6d Data Ascii: {"id":"afa0b3a8-7c2d-4a3b-b1d9-68ece34f06fc","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-fa092518ca2d","m
2024-05-21 09:22:04 UTC	181	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:04 GMT Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.9	50227	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	611	OUT	POST /e HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive Content-Length: 340 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:04 UTC	340	OUT	Data Raw: 7b 22 63 22 3a 7b 22 64 6f 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 55 22 3a 22 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 22 2c 22 72 65 22 3a 22 22 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 7d 2c 22 65 22 3a 5b 7b 22 41 22 3a 22 61 6d 78 22 2c 22 61 22 3a 22 6d 6d 74 2d 37 36 36 30 66 30 39 35 2d 38 35 36 37 2d 34 65 31 33 2d 62 32 36 36 2d 65 64 65 37 39 63 31 66 37 61 31 39 5f 31 5f 31 5f 61 64 22 2c 22 62 69 64 22 3a 22 31 30 33 63 30 39 37 30 38 65 35 35 34 65 34 22 2c 22 6e 22 3a 22 67 5f 70 62 74 6f 22 2c 22 61 75 Data Ascii: {"c":{"do":"custommapposter.com","u":"https://custommapposter.com/","U":"179b87ae-9f2f-46eb-82c4-75c95ef3faa4","re":"","V":"8.46.0","vg":"pbjs"},"e":[{"A":"amx","a":"mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad","bid":"103c09708e554e4","n":"g_pbto","au
2024-05-21 09:22:05 UTC	361	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:05 GMT Connection: close access-control-allow-origin: * cache-control: max-age=0, private, must-revalidate server: MonetEngine set-cookie: amuid2=e8f1d72a-7df7-4d05-9400-948a89039883; path=/; domain=.a-mo.net; expires=Wed, 21 May 2025 09:22:05 GMT; max-age=31536000; secure; HttpOnly; SameSite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.9	50770	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:04 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:04 UTC	1675	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 32 32 34 38 30 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283322480,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.9	50728	3.71.149.231	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	631	OUT	GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1 Host: pixel.advertising.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:05 UTC	522	IN	HTTP/1.1 301 Redirect Date: Tue, 21 May 2024 09:22:05 GMT Connection: close Server: ATS/9.1.10.112 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBL1nTGYCELC7rfzW6LZzGk8mvCSUUqYFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAArpN9ORwfrykaz-PEKGNArM; Expires=Wed, 21 May 2025 15:22:05 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 360
2024-05-21 09:22:05 UTC	360	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.9	50730	3.160.150.30	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	859	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=328512134&rnd=968176&iiqidtype=2&iiqpcid=0248b5aa-e6c9-4839-aaab-d0d2fd63d9d2&iiqpciddate=1716283289724&tsrnd=928_1716283320357&fbp=137264047&jsver=5.36&abtp=100&abtg=A HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQCDate=1716283323002
2024-05-21 09:22:05 UTC	1157	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 21 May 2024 09:22:05 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:05 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=328512134&rnd=968176&iiqidtype=2&iiqpcid=0248b5aa-e6c9-4839-aaab-d0d2fd63d9d2&iiqpciddate=1716283289724&tsrnd=928_1716283320357&fbp=137264047&jsver=5.36&abtp=100&abtg=A&ckls=true&ci=gWECw0EtsD&nc=false&trid=-680527341 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=gWECw0EtsD; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:05 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 256cd380c9790a2b71d68709829caa18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: t3InzjhF56tE5RyQWRe3BIiGFKYJ02YCO51hbdB2agQY_0HUkqcVZQ==
2024-05-21 09:22:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.9	50781	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	611	OUT	POST /e HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive Content-Length: 341 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:05 UTC	341	OUT	Data Raw: 7b 22 63 22 3a 7b 22 64 6f 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 55 22 3a 22 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 22 2c 22 72 65 22 3a 22 22 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 7d 2c 22 65 22 3a 5b 7b 22 41 22 3a 22 61 6d 78 22 2c 22 61 22 3a 22 6d 6d 74 2d 63 39 39 32 66 33 38 66 2d 37 39 65 65 2d 34 38 33 62 2d 61 32 30 36 2d 39 38 63 63 38 64 62 35 32 31 61 61 5f 31 5f 31 5f 61 64 22 2c 22 62 69 64 22 3a 22 34 39 34 32 37 63 32 61 64 32 65 35 61 66 64 22 2c 22 6e 22 3a 22 67 5f 70 62 74 6f 22 2c 22 61 75 Data Ascii: {"c":{"do":"custommapposter.com","u":"https://custommapposter.com/","U":"179b87ae-9f2f-46eb-82c4-75c95ef3faa4","re":"","V":"8.46.0","vg":"pbjs"},"e":[{"A":"amx","a":"mmt-c992f38f-79ee-483b-a206-98cc8db521aa_1_1_ad","bid":"49427c2ad2e5afd","n":"g_pbto","au
2024-05-21 09:22:05 UTC	361	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:05 GMT Connection: close access-control-allow-origin: * cache-control: max-age=0, private, must-revalidate server: MonetEngine set-cookie: amuid2=0e3392f1-f20e-4648-a920-13763fe61063; path=/; domain=.a-mo.net; expires=Wed, 21 May 2025 09:22:05 GMT; max-age=31536000; secure; HttpOnly; SameSite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.9	50793	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	704	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2590 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:05 UTC	2590	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 22 3a Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat":40.7123,"lon":
2024-05-21 09:22:05 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:22:05 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:05 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 38 64 31 39 66 61 36 61 2d 35 39 30 66 2d 34 31 30 37 2d 62 34 35 30 2d 64 31 38 35 34 63 38 38 31 38 37 39 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"8d19fa6a-590f-4107-b450-d1854c881879","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.9	50792	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	704	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2581 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:05 UTC	2581	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 22 3a Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat":40.7123,"lon":
2024-05-21 09:22:05 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:22:05 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:05 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 62 65 34 62 39 64 66 63 2d 61 31 36 63 2d 34 38 65 39 2d 39 64 32 65 2d 32 64 33 64 61 32 63 63 62 64 64 65 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"be4b9dfc-a16c-48e9-9d2e-2d3da2ccbdde","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.9	50780	52.203.33.12	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	958	OUT	GET /idex/did-004d/any?duid=15efe6ffc406--01hyd7acptahsywd92p39kvw1k&did=did-004d&cd=.custommapposter.com&pu=https%3A%2F%2Fcustommapposter.com&_pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&resolve=nonId&resolve=uid2&resolve=index&resolve=openx&resolve=pubmatic&resolve=magnite&resolve=bidswitch&resolve=medianet&resolve=sovrn&resolve=connatix&resolve=thetradedesk HTTP/1.1 Host: idx.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459
2024-05-21 09:22:05 UTC	544	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:05 GMT Connection: close trace-id: 7d2babbcc656afa6 Vary: Origin Expires: Tue, 21 May 2024 10:22:05 GMT Set-Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459; Max-Age=63072000; Expires=Thu, 21 May 2026 09:22:05 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Cache-Control: max-age=3599, private Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.9	50791	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	1940	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2576 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:05 UTC	2576	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 33 32 34 33 31 38 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 35 35 63 35 64 32 31 36 62 32 63 38 66 30 34 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 23 72 65 70 Data Ascii: {"id":"1716283324318","at":1,"cur":["USD"],"imp":[{"id":"155c5d216b2c8f04","tagid":"1433179","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F#rep
2024-05-21 09:22:05 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:22:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.9	50788	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	868	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2F&PageUrl=https%3A%2F%2Fcustommapposter.com%2F&PageReferrer=https%3A%2F%2Fcustommapposter.com%2F&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2F HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:05 UTC	1653	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 33 39 61 63 31 30 64 62 66 31 30 38 30 61 65 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 30 39 32 61 65 31 63 39 2d 34 66 65 61 2d 34 65 30 31 2d 38 63 63 30 2d 36 66 64 61 66 39 61 62 37 32 39 31 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 Data Ascii: {"Version":"1.0","Bids":{"139ac10dbf1080ae":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"092ae1c9-4fea-4e01-8cc0-6fdaf9ab7291","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monu
2024-05-21 09:22:06 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:06 GMT content-length: 181 x-envoy-upstream-service-time: 380 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:06 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 30 36 31 35 35 35 31 62 63 65 37 38 65 63 35 30 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 30 36 31 35 35 35 31 62 63 65 37 38 65 63 35 30 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 31 33 39 61 63 31 30 64 62 66 31 30 38 30 61 65 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"0615551bce78ec504bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"0615551bce78ec504bfb0857db316efd","BidID":"139ac10dbf1080ae"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.9	50795	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3545 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=6_1716283291_1716283324
2024-05-21 09:22:05 UTC	3545	OUT	Data Raw: 7b 22 61 22 3a 22 32 39 65 35 39 38 64 33 2d 62 37 61 63 2d 34 65 33 32 2d 62 31 35 62 2d 61 37 61 34 39 38 32 66 37 35 65 33 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"29e598d3-b7ac-4e32-b15b-a7a4982f75e3","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:05 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1074 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:05 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=7_1716283291_1716283325; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:05 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:22:05 UTC	1074	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 70 45 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4d 6a 6c 6c 4e 54 6b 34 5a 44 4d 74 59 6a 64 68 59 79 30 30 5a 54 4d 79 4c 57 49 78 4e 57 49 74 59 54 64 68 4e Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CpECShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkMjllNTk4ZDMtYjdhYy00ZTMyLWIxNWItYTdhN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.9	50790	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:05 UTC	1653	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 32 34 32 32 31 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283324221,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:05 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:05 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:22:05 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 34 36 33 33 64 62 30 36 38 63 66 36 66 65 62 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"14633db068cf6feb","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.9	50794	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	868	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2F&PageUrl=https%3A%2F%2Fcustommapposter.com%2F&PageReferrer=https%3A%2F%2Fcustommapposter.com%2F&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2F HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1655 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:05 UTC	1655	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 37 33 66 30 34 65 30 65 37 64 64 62 35 36 33 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 37 63 35 62 35 62 35 66 2d 32 62 62 39 2d 34 30 36 33 2d 62 37 66 34 2d 32 30 35 33 62 65 30 38 64 34 66 36 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"173f04e0e7ddb563":{"PlacementID":"ffd2f3e5d8d521d3e956b94b85e3cf84","TransactionID":"7c5b5b5f-2bb9-4063-b7f4-2053be08d4f6","Width":300,"Height":250,"AvailableSizes":"300x250","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:22:06 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:05 GMT content-length: 181 x-envoy-upstream-service-time: 214 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:06 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 66 39 66 32 62 39 36 30 64 32 62 66 30 38 64 35 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 66 39 66 32 62 39 36 30 64 32 62 66 30 38 64 35 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 42 69 64 49 44 22 3a 22 31 37 33 66 30 34 65 30 65 37 64 64 62 35 36 33 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"f9f2b960d2bf08d5ffd2f3e5d8d521d3","Placement":"ffd2f3e5d8d521d3e956b94b85e3cf84","CreativeID":"f9f2b960d2bf08d5ffd2f3e5d8d521d3","BidID":"173f04e0e7ddb563"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.9	50787	3.73.169.240	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1686 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:05 UTC	1686	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 30 33 34 31 36 39 37 2d 36 65 31 34 2d 34 39 66 64 2d 61 32 62 63 2d 62 35 63 66 31 37 37 31 37 63 35 36 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 6d Data Ascii: {"id":"50341697-6e14-49fd-a2bc-b5cf17717c56","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-fa092518ca2d","m
2024-05-21 09:22:06 UTC	181	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:05 GMT Connection: close Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.9	50799	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	821	OUT	GET /dyn/sonobi-usync?uid=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A
2024-05-21 09:22:06 UTC	505	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:06 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:06 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873800359531841-EWR
2024-05-21 09:22:06 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.9	50845	34.117.239.71	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:05 UTC	790	OUT	GET /match?bidder_id=102&ttl=1718875322&external_user_id=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c HTTP/1.1 Host: cms-xch-chicago.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:06 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 21 May 2024 09:22:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:06 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.9	50846	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	1402	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283324325&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:06 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:06 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 565 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:06 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:06 UTC	565	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.9	50798	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	775	OUT	GET /usersync/quantcast/byTYNm8ljTd0c49hOyLBYGkk3zF0Jd9nP3ezzg96? HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%222109%22%7D
2024-05-21 09:22:06 UTC	719	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:06 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 21 May 2025 09:22:06 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fr1-usync%3Fuid%3DRX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003 connection: close
2024-05-21 09:22:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.9	50887	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	3579	OUT	GET /trinity.json?key_maker=%7B%22203355575348f86%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=ce7e0257-0a75-4aec-b185-aeb1c1104b4c&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22f596db68-5d7c-4405-b7cf-44eb7f4bdc1f%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2F%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20W [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; HAPLB8G=s85190\|Zkxnv; __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c
2024-05-21 09:22:06 UTC	760	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:22:06 GMT content-type: application/json content-length: 426 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:22:05 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxnw; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:22:06 UTC	426	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 32 30 33 33 35 35 35 37 35 33 34 38 66 38 36 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 33 34 65 38 34 32 32 30 2d 65 30 66 62 2d 34 36 31 62 2d 39 65 63 30 2d 37 66 38 32 34 37 33 63 39 35 30 38 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d Data Ascii: {"slots":{"203355575348f86":{}},"sbi_dc":"iad-2-","pv":"34e84220-e0fb-461b-9ec0-7f82473c9508","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/cm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.9	50864	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:06 UTC	1653	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 32 34 35 37 31 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283324571,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.9	50938	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	696	OUT	GET /usersync?cspi=154&ttt=1&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fcons-us%3Fuser_id%3D%24%7BUID%7D HTTP/1.1 Host: e.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:06 UTC	532	IN	HTTP/1.1 302 Found access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-length: 0 location: https://router.infolinks.com/dyn/cons-us?user_id=c0c42e7a5092458e842e7a5092558e63 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:06 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:06 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.9	50924	18.211.112.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	803	OUT	GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZkxnuNHM6HMAAHezAHb..QAA%26983&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=370113415ce14bfc98e1fd71fab41459 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459
2024-05-21 09:22:06 UTC	618	IN	HTTP/1.1 303 See Other Date: Tue, 21 May 2024 09:22:06 GMT Content-Length: 0 Connection: close Location: https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=37011341-5ce1-4bfc-98e1-fd71fab41459 Set-Cookie: _li_ss=CggKBgiiARD8Fw; Max-Age=2592000; Expires=Thu, 20 Jun 2024 09:22:06 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459; Max-Age=63072000; Expires=Thu, 21 May 2026 09:22:06 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.9	50918	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	1396	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283324567&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7bde16b5-414f-4c99-b45a-259240a801e0_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.9	50904	8.2.110.161	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	703	OUT	GET /5abf3d2eff2f70c0a0669cd9f0f84ba0.gif?puid=[UID]&redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmgid-us%3Fuser_id%3D%5BUID%5D HTTP/1.1 Host: cm-x.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:06 UTC	537	IN	HTTP/1.1 302 Found Set-Cookie: lmg_usr=87977e68-6187-4e81-a1fa-160458044ff2; path=/; domain=.mgid.com; expires=Tue, 04 Jun 2024 09:22:06 GMT;SameSite=None;Secure Set-Cookie: lmg_r=13; path=/; domain=.mgid.com; expires=Tue, 04 Jun 2024 09:22:06 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://router.infolinks.com/dyn/mgid-us?user_id=87977e68-6187-4e81-a1fa-160458044ff2 Date: Tue, 21 May 2024 09:22:06 GMT Connection: close Transfer-Encoding: chunked
2024-05-21 09:22:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.9	50901	100.28.13.136	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:06 UTC	1758	OUT	GET /j?dtstmp=1716283324432&did=did-004d&se=e30&duid=15efe6ffc406--01hyd7acptahsywd92p39kvw1k&tv=v2.14.3&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ext__pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&wpn=lc-bundle&cd=.custommapposter.com&c=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-PGgxIGNsYXNzPSJlbnRyeS10aXRsZSBtYi01IHRleHQtY2VudGVyIGZvbnQtc2VtaWJvbGQgdGV4dC0yeGwgeGw6dGV4dC00eGwgIWxlYWRpbmctY29tbW9uIj4 [TRUNCATED] Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459
2024-05-21 09:22:06 UTC	475	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:06 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: 29f3ee3c-eed8-4e21-a358-9bfb21004e92 set-cookie: lidid=37011341-5ce1-4bfc-98e1-fd71fab41459; Max-Age=63072000; Domain=.liadm.com; Path=/j; Secure; SameSite=None access-control-expose-headers: * access-control-allow-origin: https://custommapposter.com access-control-allow-methods: GET access-control-allow-credentials: true
2024-05-21 09:22:06 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.9	50954	34.117.239.71	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:07 UTC	508	OUT	GET /match?liv=h&us_privacy=&bidder_id=2&external_user_id=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:07 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 21 May 2024 09:22:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:07 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.9	50958	35.244.193.51	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:07 UTC	463	OUT	GET /v1/ppid?pid=0015a0000344WLkAAM&ver=1.10.0 HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:07 UTC	202	IN	HTTP/1.1 200 OK content-type: application/json Content-Length: 223 via: 1.1 google date: Tue, 21 May 2024 09:22:07 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:07 UTC	223	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 74 72 75 65 2c 22 64 61 74 61 22 3a 7b 22 65 69 64 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 69 6e 64 65 78 65 78 63 68 61 6e 67 65 2e 63 6f 6d 22 2c 22 75 69 64 73 22 3a 5b 7b 22 69 64 22 3a 22 5a 6b 78 6e 75 4e 48 4d 36 48 4d 41 41 48 65 7a 41 48 62 2e 2e 51 41 41 26 39 38 33 22 2c 22 65 78 74 22 3a 7b 22 73 74 79 70 65 22 3a 22 70 70 75 69 64 22 7d 7d 5d 7d 2c 7b 22 73 6f 75 72 63 65 22 3a 22 61 64 6e 78 73 2e 63 6f 6d 22 2c 22 75 69 64 73 22 3a 5b 7b 22 69 64 22 3a 22 36 34 30 33 37 38 34 35 37 36 35 38 31 32 30 33 38 36 38 22 2c 22 65 78 74 22 3a 7b 22 73 74 79 70 65 22 3a 22 70 70 75 69 64 22 7d 7d 5d 7d 5d 7d 7d Data Ascii: {"succeeded":true,"data":{"eids":[{"source":"indexexchange.com","uids":[{"id":"ZkxnuNHM6HMAAHezAHb..QAA&983","ext":{"stype":"ppuid"}}]},{"source":"adnxs.com","uids":[{"id":"6403784576581203868","ext":{"stype":"ppuid"}}]}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.9	50963	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:07 UTC	699	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=b.r&u=7bde16b5-414f-4c99-b45a-259240a801e0&d=%7B%22utm%22%3A%7B%7D%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:07 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180423 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:07 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.9	50956	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:07 UTC	656	OUT	GET /dyn/apn-usync?user_id=6403784576581203868 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274
2024-05-21 09:22:07 UTC	484	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: ANUSERCOOKIE=6403784576581203868; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:07 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:07 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873800bf8b24307-EWR
2024-05-21 09:22:07 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.9	50957	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:07 UTC	666	OUT	GET /dyn/iqm-us?uid=e714687a-b06b-42cd-94cc-eea520c604e9 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274
2024-05-21 09:22:07 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:07 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:07 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873800c09d77c99-EWR
2024-05-21 09:22:07 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.9	50955	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:07 UTC	349	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:07 UTC	309	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Tue, 21 May 2024 09:22:06 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:22:07 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 65 71 55 67 77 68 56 6f 4a 57 44 59 6d 59 4f 4a 73 6e 4b 35 46 77 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"eqUgwhVoJWDYmYOJsnK5Fw=="}
2024-05-21 09:22:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.9	50991	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:07 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
2024-05-21 09:22:08 UTC	265	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:22:08 GMT server: envoy vary: accept-encoding x-envoy-upstream-service-time: 1 connection: close
2024-05-21 09:22:08 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.9	50972	3.121.52.194	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:08 UTC	615	OUT	GET /um?redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fcad-us%3Fuser_id%3D$UID HTTP/1.1 Host: cs.emxdgt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:08 UTC	103	IN	HTTP/1.1 204 No Content Server: awselb/2.0 Date: Tue, 21 May 2024 09:22:08 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.9	50999	172.64.144.166	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:08 UTC	568	OUT	GET /gptprebidnative/202403121239/wrap.js HTTP/1.1 Host: cdn.confiant-integrations.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:08 UTC	567	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: z4G4h//5NRdot7JcsoYVtgaGxZtQMnS82qxCjfG0e4e9NWEwMWSNdrrxO2uh6YYh0CvjJ7w9eGk= x-amz-request-id: WJZRTV92VB1K3WFX Last-Modified: Tue, 12 Mar 2024 16:41:24 GMT ETag: W/"c1e08625d829bb0007d3c12ed83ad1cb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 CF-Cache-Status: HIT Age: 4110405 Server: cloudflare CF-RAY: 887380113812c457-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:08 UTC	802	IN	Data Raw: 37 64 37 39 0d 0a 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 73 70 61 63 65 64 2d 63 6f 6d 6d 65 6e 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 27 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 33 2d 32 30 32 34 20 43 6f 6e 66 69 61 6e 74 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 27 3b 0a 20 20 27 76 33 2e 32 30 32 34 30 33 31 32 31 32 33 39 27 3b 0a 20 20 76 61 72 20 63 6f 6e 66 69 61 6e 74 43 6f 6d 6d 6f 6e 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 65 78 70 6f 72 74 73 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 61 63 37 38 62 2c 5f 30 78 34 39 62 35 32 63 29 7b 76 61 72 20 5f 30 78 38 30 62 62 65 32 3d 5f 30 Data Ascii: 7d79/* eslint-disable spaced-comment */(function() { 'Copyright 2013-2024 Confiant Inc. All rights reserved.'; 'v3.202403121239'; var confiantCommon = (function (exports) { 'use strict'; (function(_0x3ac78b,_0x49b52c){var _0x80bbe2=_0
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 2c 30 78 31 39 34 64 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 61 6e 74 54 72 79 54 6f 47 65 74 43 6f 6e 66 69 67 28 5f 30 78 32 34 38 36 37 38 29 7b 76 61 72 20 5f 30 78 34 64 31 34 37 65 3d 5f 30 78 33 66 66 61 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 36 39 37 32 31 35 28 5f 30 78 31 32 31 38 66 38 2c 5f 30 78 34 35 65 64 33 35 29 7b 72 65 74 75 72 6e 20 21 21 28 5f 30 78 31 32 31 38 66 38 26 26 5f 30 78 34 35 65 64 33 35 26 26 5f 30 78 31 32 31 38 66 38 5b 5f 30 78 34 35 65 64 33 35 5d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 38 34 62 66 61 28 29 7b 76 61 72 20 5f 30 78 33 39 35 66 37 65 3d 5f 30 78 33 66 66 61 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 39 35 66 37 65 28 30 78 61 38 29 5d 3f 64 6f 63 75 6d 65 6e 74 Data Ascii: ,0x194d1));function confiantTryToGetConfig(_0x248678){var _0x4d147e=_0x3ffa;function _0x697215(_0x1218f8,_0x45ed35){return !!(_0x1218f8&&_0x45ed35&&_0x1218f8[_0x45ed35]);}function _0x584bfa(){var _0x395f7e=_0x3ffa;return document[_0x395f7e(0xa8)]?document
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 39 65 66 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 3a 5f 30 78 31 31 33 32 66 36 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 29 3b 69 66 28 5f 30 78 34 36 33 31 32 39 29 7b 69 66 28 21 5f 30 78 34 36 33 31 32 39 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 29 74 72 79 7b 5f 30 78 34 33 30 37 30 31 3d 77 69 6e 64 6f 77 5b 5f 30 78 34 64 31 34 37 65 28 30 78 61 35 29 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 66 29 5d 2c 5f 30 78 34 36 33 31 32 39 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 3d 5f 30 78 34 33 30 37 30 31 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 3b 7d 63 61 74 63 68 28 5f 30 78 34 37 39 33 63 39 29 7b 7d 72 65 74 75 72 6e 20 5f 30 78 34 36 33 31 32 Data Ascii: 9ef][_0x4d147e(0xb0)]:_0x1132f6[_0x4d147e(0xb0)]);if(_0x463129){if(!_0x463129[_0x4d147e(0xbb)])try{_0x430701=window[_0x4d147e(0xa5)][_0x4d147e(0xbf)],_0x463129[_0x4d147e(0xbb)]=_0x430701[_0x4d147e(0xb0)][_0x4d147e(0xbb)];}catch(_0x4793c9){}return _0x46312
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 39 30 62 30 64 5b 30 78 30 5d 2c 5f 30 78 35 38 62 30 36 61 3d 5f 30 78 33 66 66 61 39 64 2b 5f 30 78 33 39 30 66 37 31 2c 5f 30 78 33 61 37 37 61 65 3d 5f 30 78 32 35 61 33 62 39 5b 5f 30 78 35 38 62 30 36 61 5d 3b 72 65 74 75 72 6e 20 21 5f 30 78 33 61 37 37 61 65 3f 28 5f 30 78 37 36 63 63 35 65 3d 5f 30 78 33 66 66 61 5b 27 58 67 4e 63 50 73 27 5d 28 5f 30 78 37 36 63 63 35 65 29 2c 5f 30 78 32 35 61 33 62 39 5b 5f 30 78 35 38 62 30 36 61 5d 3d 5f 30 78 37 36 63 63 35 65 29 3a 5f 30 78 37 36 63 63 35 65 3d 5f 30 78 33 61 37 37 61 65 2c 5f 30 78 37 36 63 63 35 65 3b 7d 2c 5f 30 78 33 66 66 61 28 5f 30 78 32 35 61 33 62 39 2c 5f 30 78 34 32 66 63 32 64 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 30 62 28 29 7b 76 61 72 20 5f 30 78 32 61 65 35 39 Data Ascii: 90b0d[0x0],_0x58b06a=_0x3ffa9d+_0x390f71,_0x3a77ae=_0x25a3b9[_0x58b06a];return !_0x3a77ae?(_0x76cc5e=_0x3ffa['XgNcPs'](_0x76cc5e),_0x25a3b9[_0x58b06a]=_0x76cc5e):_0x76cc5e=_0x3a77ae,_0x76cc5e;},_0x3ffa(_0x25a3b9,_0x42fc2d);}function _0x190b(){var _0x2ae59
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 31 30 34 30 66 30 2a 30 78 34 30 2b 5f 30 78 34 62 63 36 66 36 3a 5f 30 78 34 62 63 36 66 36 2c 5f 30 78 33 31 39 33 63 64 2b 2b 25 30 78 34 29 3f 5f 30 78 31 65 61 35 30 39 2b 3d 53 74 72 69 6e 67 5b 27 66 72 6f 6d 43 68 61 72 43 6f 64 65 27 5d 28 30 78 66 66 26 5f 30 78 31 30 34 30 66 30 3e 3e 28 2d 30 78 32 2a 5f 30 78 33 31 39 33 63 64 26 30 78 36 29 29 3a 30 78 30 29 7b 5f 30 78 34 62 63 36 66 36 3d 5f 30 78 32 36 63 34 31 32 5b 27 69 6e 64 65 78 4f 66 27 5d 28 5f 30 78 34 62 63 36 66 36 29 3b 7d 66 6f 72 28 76 61 72 20 5f 30 78 33 30 34 33 37 31 3d 30 78 30 2c 5f 30 78 34 36 37 31 36 31 3d 5f 30 78 31 65 61 35 30 39 5b 27 6c 65 6e 67 74 68 27 5d 3b 5f 30 78 33 30 34 33 37 31 3c 5f 30 78 34 36 37 31 36 31 3b 5f 30 78 33 30 34 33 37 31 2b 2b 29 7b 5f Data Ascii: 1040f00x40+_0x4bc6f6:_0x4bc6f6,_0x3193cd++%0x4)?_0x1ea509+=String['fromCharCode'](0xff&_0x1040f0>>(-0x2_0x3193cd&0x6)):0x0){_0x4bc6f6=_0x26c412['indexOf'](_0x4bc6f6);}for(var _0x304371=0x0,_0x467161=_0x1ea509['length'];_0x304371<_0x467161;_0x304371++){_
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 30 78 34 61 61 36 39 61 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 30 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 65 61 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 34 29 5d 3b 7d 63 61 74 63 68 28 5f 30 78 31 30 34 30 66 30 29 7b 7d 69 66 28 5f 30 78 31 65 61 35 30 39 29 72 65 74 75 72 6e 20 5f 30 78 31 65 61 35 30 39 3b 74 72 79 7b 76 61 72 20 5f 30 78 32 64 63 37 66 31 3d 30 78 30 2c 5f 30 78 33 31 39 33 63 64 3d 5f 30 78 34 61 61 36 39 61 3b 77 68 69 6c 65 28 21 5f 30 78 33 31 39 33 63 64 5b 5f 30 78 33 39 37 66 62 37 28 30 78 65 61 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 34 29 5d 26 26 5f 30 78 33 31 39 33 63 64 21 3d 3d 5f 30 78 34 61 61 36 39 61 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 30 29 5d 29 7b 69 66 28 5f 30 78 32 64 63 37 66 31 Data Ascii: 0x4aa69a[_0x397fb7(0xf0)][_0x397fb7(0xea)][_0x397fb7(0xf4)];}catch(_0x1040f0){}if(_0x1ea509)return _0x1ea509;try{var _0x2dc7f1=0x0,_0x3193cd=_0x4aa69a;while(!_0x3193cd[_0x397fb7(0xea)][_0x397fb7(0xf4)]&&_0x3193cd!==_0x4aa69a[_0x397fb7(0xf0)]){if(_0x2dc7f1
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 3b 7d 0a 0a 20 20 20 20 76 61 72 20 5f 30 78 34 35 34 66 39 36 3d 5f 30 78 35 33 63 34 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 33 63 34 28 5f 30 78 31 61 61 39 33 33 2c 5f 30 78 32 39 33 61 66 64 29 7b 76 61 72 20 5f 30 78 32 34 32 64 36 35 3d 5f 30 78 32 34 32 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 33 63 34 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 33 63 34 32 33 2c 5f 30 78 31 63 62 37 30 61 29 7b 5f 30 78 35 33 63 34 32 33 3d 5f 30 78 35 33 63 34 32 33 2d 30 78 39 65 3b 76 61 72 20 5f 30 78 34 36 37 64 65 66 3d 5f 30 78 32 34 32 64 36 35 5b 5f 30 78 35 33 63 34 32 33 5d 3b 69 66 28 5f 30 78 35 33 63 34 5b 27 41 65 6f 59 66 49 27 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 5f 30 78 31 37 32 33 33 39 3d 66 75 6e 63 74 69 6f 6e 28 5f Data Ascii: ;} var _0x454f96=_0x53c4;function _0x53c4(_0x1aa933,_0x293afd){var _0x242d65=_0x242d();return _0x53c4=function(_0x53c423,_0x1cb70a){_0x53c423=_0x53c423-0x9e;var _0x467def=_0x242d65[_0x53c423];if(_0x53c4['AeoYfI']===undefined){var _0x172339=function(_
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 30 78 65 39 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 33 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 64 31 29 29 2f 30 78 34 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 64 35 29 29 2f 30 78 35 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 63 29 29 2f 30 78 36 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 65 62 29 29 2f 30 78 37 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 63 37 29 29 2f 30 78 38 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 65 36 29 29 2f 30 78 39 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 64 29 29 2f Data Ascii: 0xe9))/0x2)+-parseInt(_0x1f689c(0xb3))/0x3(parseInt(_0x1f689c(0xd1))/0x4)+parseInt(_0x1f689c(0xd5))/0x5+-parseInt(_0x1f689c(0xbc))/0x6+-parseInt(_0x1f689c(0xeb))/0x7(parseInt(_0x1f689c(0xc7))/0x8)+parseInt(_0x1f689c(0xe6))/0x9+parseInt(_0x1f689c(0xbd))/
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 65 57 69 6e 64 6f 77 28 77 69 6e 64 6f 77 2c 5f 30 78 32 31 66 39 36 32 29 3b 5f 30 78 34 63 61 39 66 35 26 26 5f 30 78 34 63 61 39 66 35 5b 5f 30 78 32 38 61 64 61 62 28 30 78 64 34 29 5d 28 5f 30 78 32 38 61 64 61 62 28 30 78 62 35 29 2b 5f 30 78 32 31 66 39 36 32 5b 5f 30 78 32 38 61 64 61 62 28 30 78 64 64 29 5d 2b 5f 30 78 31 63 36 32 31 37 2c 27 2a 27 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 65 32 37 35 66 28 5f 30 78 31 65 66 36 36 38 29 7b 76 61 72 20 5f 30 78 34 38 62 39 39 62 3d 5f 30 78 34 35 34 66 39 36 3b 72 65 74 75 72 6e 20 5f 30 78 31 65 66 36 36 38 26 26 5f 30 78 31 65 66 36 36 38 5b 5f 30 78 34 38 62 39 39 62 28 30 78 62 62 29 5d 26 26 5f 30 78 31 65 66 36 36 38 5b 5f 30 78 34 38 62 39 39 62 28 30 78 61 38 29 5d 26 26 5f 30 78 31 Data Ascii: eWindow(window,_0x21f962);_0x4ca9f5&&_0x4ca9f5[_0x28adab(0xd4)](_0x28adab(0xb5)+_0x21f962[_0x28adab(0xdd)]+_0x1c6217,'*');}function _0x5e275f(_0x1ef668){var _0x48b99b=_0x454f96;return _0x1ef668&&_0x1ef668[_0x48b99b(0xbb)]&&_0x1ef668[_0x48b99b(0xa8)]&&_0x1
2024-05-21 09:22:08 UTC	1369	IN	Data Raw: 54 4c 45 76 6e 4c 44 61 27 2c 27 44 78 62 4b 79 78 72 4c 76 67 66 59 7a 32 76 30 41 77 35 4e 72 4e 6a 56 42 75 31 48 43 65 6a 48 41 57 27 2c 27 42 4e 76 54 79 4d 76 59 27 2c 27 43 4d 76 58 44 77 76 5a 44 65 6a 50 7a 68 6d 27 2c 27 44 67 4c 54 7a 71 27 2c 27 43 4d 76 54 42 33 7a 4c 72 78 7a 4c 42 4e 72 6d 41 78 6e 30 7a 77 35 4c 43 47 27 2c 27 44 68 6a 31 7a 71 27 2c 27 43 68 6a 4c 79 4d 4c 4b 27 2c 27 7a 33 62 30 6c 78 62 59 7a 77 6a 50 7a 61 27 2c 27 79 78 6a 64 27 2c 27 7a 67 76 32 74 77 39 4b 7a 71 27 2c 27 41 78 6e 62 75 47 27 2c 27 79 4d 58 56 79 32 54 50 42 4d 44 6a 7a 61 27 2c 27 44 78 62 4b 79 78 72 4c 76 67 66 59 7a 32 76 30 41 77 35 4e 72 4e 6a 56 42 75 31 48 43 61 27 2c 27 6e 64 69 57 6d 4a 44 7a 72 75 48 50 7a 4d 69 27 2c 27 6e 4a 71 58 6d 64 Data Ascii: TLEvnLDa','DxbKyxrLvgfYz2v0Aw5NrNjVBu1HCejHAW','BNvTyMvY','CMvXDwvZDejPzhm','DgLTzq','CMvTB3zLrxzLBNrmAxn0zw5LCG','Dhj1zq','ChjLyMLK','z3b0lxbYzwjPza','yxjd','zgv2tw9Kzq','AxnbuG','yMXVy2TPBMDjza','DxbKyxrLvgfYz2v0Aw5NrNjVBu1HCa','ndiWmJDzruHPzMi','nJqXmd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.9	50998	52.94.223.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:08 UTC	871	OUT	GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:08 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:08 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 363 Connection: close x-amz-rid: VE3Y89XQESGDY3F4CMDT Set-Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 09:22:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 09:22:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:08 UTC	363	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 73 6d 61 61 74 6f 5f 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.9	51001	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	672	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=48148366-b8b4-44da-8e7e-0bd3bd28e9f0 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:09 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180421 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.9	51002	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	721	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=i.r&u=KJI01M&d=%7B%22auPath%22%3A%22%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDW.A%22%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:09 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180425 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.9	51006	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	672	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7660f095-8567-4e13-b266-ede79c1f7a19 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:09 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180425 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.9	51003	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	672	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=c992f38f-79ee-483b-a206-98cc8db521aa HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:09 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180421 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.9	51007	159.223.96.127	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	1334	OUT	GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=ysE118IZ39XMqxHHQ2sqUkssIxQKO2oCEngFCmwoSEB4fForaVBdbi4UHHp4W3ptBlt6YVNNLnsNej8BATx6RUx5Kwh5awRdOyhGGypqFGtvVQo9eUFAcStafm1SD2h9QE8rKwx8PgcbdG9EHnt9Cyw8BV1veUVJK3gIeG1XWj16EhxqZBp%2FaFVcbXoSGiwuD3s%2BBwxrdUBLfH0JeTsRFXp7RU9%2BeAB5b1FfbXxDGX8rXnBsBQlreEBaZGoOemgCW2h0R095eQB9bwtaaXRATCl9DXx4HxtufkYdeXoKe2sLCD0vE0ksew18blEIOnpTVGp%2BDXw8BwFtfkdIfikJKGgEATx5Rhl4fAFrBx8bOyIEFjxqAnl2EV48PQNacjNFZXhAXCs%2BGBcmagJrbFcJbHgQQHFlXHw5AhRvfkgdZS0AcD4eC250Ehl%2FKl5%2FYlcNemFTGycmViw5R1A3IzgcanIaf2kEXG54RU4sLVsrYgFdbHhDS34uCC9iEUQ%3D
2024-05-21 09:22:09 UTC	1307	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; Domain=.cootlogix.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:09 GMT; Secure; SameSite=None set-cookie: vdzj1_3646a4db=4Kd12SghpEUNzYhrtKEUYETchIB8rG1BOCEVeQ3Ewd0JpXBAWYAQMRiYwKkhpC0FDZgVKXGdgKElsWxdGawNfRHFkLUppWUUQMAJfEyd3YlhsDkERZ1dQSSY3eU04XkJEYlALE3FgKk57RFBBNVRdQyAzeB5uXEZFMFdYQXIxLR9uCxZWf0VeQiMwe006ChYSZFUMRHBmdktqXEdFYwZKXGdjek1vWEpEZgUORXRnL006DktCZVdbRXR3YlhvW0BFMVdRRnJkf0JtXUoXYl5ZRCRge097RFBCYFANQXdnfEthWRcWMVYMQ3BgehhoCkVWf0VeRXAzekJsW0REZQZZEXdidh5tXxNEZ15KLWl3LRUsBgZWaVdEUiIxPgh7UglWOhQtJWdvKBs1GxdYcQAMADd3dFhpSl5WNAMYAgY6IAk8BgZWaUVKXGcgPSorAQQVMB5KSmd3M1Z7GxcHIA4HHmdvbEw9WEZBMl9RXSFgLUt0X0FNNkoNSHwxY0hvUREVZAUORn0xelh1ShEbPQkNEzE8IRQQDFBOcVFbRyBje05vDBcXMV9aFHFgfElvDkISa0VEUiwmBxwrCR8RcV0cAjAwMw%3D%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:37:09 GMT; Secure; SameSite=None content-type: text/html content-length: 2592 date: Tue, 21 May 2024 09:22:09 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:09 UTC	2592	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 3d 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 76 61 72 20 73 79 6e 63 73 3d 5b 27 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 38 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 35 39 39 38 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 70 75 3d 68 74 74 70 Data Ascii: <html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://image8.pubmatic.com/AdServer/ImgSync?p=159988&gdpr=0&gdpr_consent=&us_privacy=&pu=http

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.9	51004	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	672	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:09 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180421 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.9	51005	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	672	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=4341eb8a-cada-4d0a-9fc1-fe0fe64f585f HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:09 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqHbcNwKehJ-1lL1F9O5_Qw2VJEoVX_FQkz2O9muzI1BN_ONZYkyZDSuaRg3miSGlliHnxfhDE7-Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:48 GMT Expires: Sat, 26 Apr 2025 03:41:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180421 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.9	51000	172.67.41.60	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	546	OUT	GET /tag?aax_id=AAX8RN661&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:09 UTC	360	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600, must-revalidate Location: /tag?o=5761653252554752&upapi=true Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 2041 Server: cloudflare CF-RAY: 8873801a1edb5e74-EWR
2024-05-21 09:22:09 UTC	67	IN	Data Raw: 33 64 0d 0a 3c 61 20 68 72 65 66 3d 22 2f 74 61 67 3f 6f 3d 35 37 36 31 36 35 33 32 35 32 35 35 34 37 35 32 26 61 6d 70 3b 75 70 61 70 69 3d 74 72 75 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 3d<a href="/tag?o=5761653252554752&upapi=true">Found</a>.
2024-05-21 09:22:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.9	51018	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	864	OUT	GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
2024-05-21 09:22:09 UTC	278	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2356 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:22:09 GMT server: envoy vary: accept-encoding, Accept-Encoding x-envoy-upstream-service-time: 1 connection: close
2024-05-21 09:22:09 UTC	2356	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.9	51024	147.182.216.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	1135	OUT	GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:22:09 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:22:09 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.9	51023	185.64.190.78	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	1958	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=54676881&p=156972&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:09 UTC	590	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156972:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Tue, 21 May 2024 09:22:09 GMT Content-Length: 47 Connection: close
2024-05-21 09:22:09 UTC	47	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 50 75 67 4d 61 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 66 61 6c 73 65 2c 20 66 61 6c 73 65 2c 20 74 72 75 65 29 3b Data Ascii: PubMatic.PugMasterCallback(false, false, true);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.9	51026	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
2024-05-21 09:22:09 UTC	265	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:22:09 GMT server: envoy vary: accept-encoding x-envoy-upstream-service-time: 0 connection: close
2024-05-21 09:22:09 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.9	51009	13.32.27.11	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:09 UTC	754	OUT	GET /ss/2000033.html HTTP/1.1 Host: sync.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:09 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 5020 Connection: close Date: Mon, 20 May 2024 18:04:37 GMT Last-Modified: Mon, 20 May 2024 14:32:41 GMT ETag: "e38bb0a0fe3342dbe3b05144c01ddd70" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 307a3e1075dd3d0976c64513a6ec3d74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: ruNb8-47O57gjSpjDWz2BQGSY8c8FDcB96E4YGUyiN82BGMs4f1vwQ== Age: 55053
2024-05-21 09:22:09 UTC	5020	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 44 41 59 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3d 20 32 34 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 31 30 30 30 3b 0a 20 20 20 20 76 61 72 20 53 59 4e 43 5f 43 4f 4f 4b 49 45 5f 54 54 4c 20 20 20 20 20 3d 20 30 2e 37 35 20 2a 20 44 41 59 53 3b 0a 20 20 20 20 76 61 72 20 53 59 4e 43 5f 43 4f 4f 4b 49 45 20 20 20 20 20 20 20 20 20 3d 20 27 73 62 5f 73 73 27 3b 0a 20 20 20 20 76 61 72 20 53 43 52 49 50 54 5f 56 45 52 53 49 4f 4e 20 20 20 20 20 20 3d 20 22 33 31 22 3b 0a 0a 20 20 20 20 76 61 72 20 75 20 3d 20 28 6e 65 77 20 55 52 4c 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 29 29 2e 73 65 61 72 63 68 50 Data Ascii: <html><body><script>(function() { var DAYS = 24 * 60 * 60 * 1000; var SYNC_COOKIE_TTL = 0.75 * DAYS; var SYNC_COOKIE = 'sb_ss'; var SCRIPT_VERSION = "31"; var u = (new URL(document.location)).searchP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.9	51034	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	1449	OUT	GET /search-article HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283321.0.0.0; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff
2024-05-21 09:22:10 UTC	689	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: immutable, max-age=31536000, public CF-Cache-Status: HIT Age: 177919 Last-Modified: Sun, 19 May 2024 07:56:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6eXXkO5sYXH0kZ%2F8rBygHj8v%2FK3sC2qmzgDa%2B0oGLfh4y9GSU5sURAYtZeWItcBZZ4sFnFPUAPD6LQzDYL%2BAexb51ewxUSq0hOzPPpc23DG%2FFKT8Ul0ez4QCZN8k1gBGzTOVDy%2By"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8873801d8ab841ba-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:10 UTC	680	IN	Data Raw: 33 61 62 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 70 35 48 35 35 72 63 71 46 54 4d 51 51 51 6e 6f 55 34 45 7a 59 4f 4f 76 4e 77 66 66 51 53 45 76 6a 32 57 47 31 5a 4d 6b 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c Data Ascii: 3ab1<!DOCTYPE html><html><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="csrf-token" content="p5H55rcqFTMQQQnoU4EzYOOvNwffQSEvj2WG1ZMk"> <meta name="robots" content="index, follow,
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 35 46 45 37 35 45 32 39 39 33 38 46 45 31 44 30 44 44 35 34 42 41 44 32 42 32 35 43 39 39 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 41 32 30 39 32 30 46 45 38 42 32 36 39 33 41 38 34 34 36 39 33 43 41 37 42 32 44 41 30 33 34 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 34 34 33 35 32 37 39 36 32 39 38 34 45 44 36 31 31 33 45 37 31 43 32 45 31 43 31 45 36 46 43 43 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 Data Ascii: " /><meta name="msvalidate.01" content="5FE75E29938FE1D0DD54BAD2B25C99E4" /><meta name="msvalidate.01" content="A20920FE8B2693A844693CA7B2DA0341" /><meta name="msvalidate.01" content="443527962984ED6113E71C2E1C1E6FCC" /><meta name="msvalidate.01" cont
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 43 36 45 46 41 32 34 44 45 37 43 42 33 45 30 42 43 39 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 46 37 42 33 42 44 32 46 45 36 39 30 37 32 42 43 43 45 34 31 32 36 42 39 43 43 35 30 34 35 43 42 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 38 45 46 39 35 41 44 32 31 32 41 44 44 34 38 43 38 37 38 46 32 31 42 31 39 33 41 42 38 45 34 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 43 32 35 44 41 37 34 43 38 46 46 35 46 41 42 31 34 32 46 43 37 30 32 30 34 42 42 30 37 41 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d Data Ascii: C6EFA24DE7CB3E0BC9" /><meta name="msvalidate.01" content="F7B3BD2FE69072BCCE4126B9CC5045CB" /><meta name="msvalidate.01" content="98EF95AD212ADD48C878F21B193AB8E4" /><meta name="msvalidate.01" content="7C25DA74C8FF5FAB142FC70204BB07A6" /><meta name="m
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 6e 74 3d 22 31 34 38 32 38 36 36 30 43 36 42 34 33 44 35 34 42 37 31 42 30 33 32 35 37 33 44 31 44 43 43 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 36 38 32 37 32 43 39 44 31 46 31 37 46 34 33 41 33 36 42 45 46 39 30 30 43 33 37 39 32 33 37 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 37 35 32 42 36 38 46 39 33 31 34 32 37 33 32 45 41 42 37 43 43 42 37 41 35 44 37 37 36 44 31 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 42 31 41 39 39 42 44 44 37 44 36 31 35 36 42 33 30 41 37 38 45 36 38 46 33 36 35 43 39 46 38 33 Data Ascii: nt="14828660C6B43D54B71B032573D1DCC6" /><meta name="msvalidate.01" content="968272C9D1F17F43A36BEF900C379237" /><meta name="msvalidate.01" content="752B68F93142732EAB7CCB7A5D776D16" /><meta name="msvalidate.01" content="B1A99BDD7D6156B30A78E68F365C9F83
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 73 65 61 72 63 68 2d 61 72 74 69 63 6c 65 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 61 72 63 68 20 2d 20 43 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 20 2d 20 41 6c 6c 20 41 62 6f 75 74 20 45 76 65 72 79 74 68 69 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 3a 20 43 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 20 69 73 20 61 20 77 65 62 73 69 74 65 20 74 68 61 74 20 77 72 69 74 65 73 20 61 62 6f 75 74 20 6d 61 6e 79 20 74 6f 70 69 63 73 20 6f 66 20 69 6e 74 65 72 65 73 74 20 74 6f 20 79 6f 75 Data Ascii: ps://custommapposter.com/search-article"/><meta property="og:title" content="Search - Custommapposter - All About Everything" /><meta property="og:description" content="Explore: Custommapposter is a website that writes about many topics of interest to you
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 63 73 73 2f 6e 65 77 73 69 6b 65 2e 63 73 73 3f 69 64 3d 64 33 37 33 32 31 35 36 39 63 62 61 37 36 62 31 66 63 64 38 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 6a 73 2f 6e 65 77 73 69 6b 65 2e 6a 73 3f 69 64 3d 32 65 32 39 39 33 63 62 33 64 37 35 62 62 33 34 39 32 62 31 22 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 Data Ascii: ="stylesheet" href="/static-res/css/newsike.css?id=d37321569cba76b1fcd8"> <script src="/static-res/js/newsike.js?id=2e2993cb3d75bb3492b1" defer></script> <link rel="preconnect" href="https://www.googletagmanager.com" /><link rel="dns-pr
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 2d 72 65 73 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 70 70 6c 65 2d 69 63 6f 6e 2d 31 35 32 78 31 35 32 2e 70 6e 67 3f 69 64 3d 30 32 36 37 38 37 64 39 62 30 31 38 36 36 64 63 32 65 63 62 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2d 72 65 73 2f 69 6d 67 2f 6e 65 77 73 69 6b 65 2f 61 70 70 6c 65 2d 69 63 6f 6e 2d 31 38 30 78 31 38 30 2e 70 6e 67 3f 69 64 3d 61 63 35 64 38 36 36 39 66 39 66 61 63 30 30 37 31 36 64 61 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 68 72 65 Data Ascii: -res/img/newsike/apple-icon-152x152.png?id=026787d9b01866dc2ecb" /> <link rel="apple-touch-icon" sizes="180x180" href="/static-res/img/newsike/apple-icon-180x180.png?id=ac5d8669f9fac00716da" /> <link rel="icon" type="image/png" sizes="192x192" hre
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 2d 35 34 37 32 35 48 51 56 4d 46 27 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 67 72 6f 77 2d 69 6e 69 74 69 61 6c 69 7a 65 72 3d 22 22 3e 21 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 7c 7c 28 28 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 2e 5f 2e 70 75 73 68 28 65 29 3b 7d 29 2c 28 77 69 6e 64 6f 77 2e 67 72 6f 77 4d 65 2e 5f 3d 5b 5d 29 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 28 65 2e 74 79 70 65 3d 22 74 65 Data Ascii: gtag('config', 'G-54725HQVMF'); </script> <script data-grow-initializer="">!(function(){window.growMe\|\|((window.growMe=function(e){window.growMe._.push(e);}),(window.growMe._=[]));var e=document.createElement("script");(e.type="te
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 62 65 74 77 65 65 6e 20 66 6c 65 78 2d 77 72 61 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 30 20 66 6c 65 78 2d 31 20 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6d 69 6e 2d 77 2d 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 70 2d 32 20 72 6f 75 6e 64 65 64 2d 6c 67 22 20 3a 63 6c 61 73 73 3d 22 7b 20 27 62 67 2d 69 6e 64 69 67 6f 2d 36 30 30 27 3a 20 73 74 79 6c 65 20 3d 3d 20 27 73 75 63 63 65 73 73 27 2c 20 27 62 67 2d 72 65 64 2d 36 30 30 27 3a 20 73 74 79 6c 65 20 3d 3d 20 27 64 61 6e 67 65 72 27 20 7d 22 3e 0a 20 20 20 20 Data Ascii: v class="flex items-center justify-between flex-wrap"> <div class="w-0 flex-1 flex items-center min-w-0"> <span class="flex p-2 rounded-lg" :class="{ 'bg-indigo-600': style == 'success', 'bg-red-600': style == 'danger' }">
2024-05-21 09:22:10 UTC	1369	IN	Data Raw: 22 6d 6c 2d 33 20 66 6f 6e 74 2d 6d 65 64 69 75 6d 20 74 65 78 74 2d 73 6d 20 74 65 78 74 2d 77 68 69 74 65 20 74 72 75 6e 63 61 74 65 22 20 78 2d 74 65 78 74 3d 22 6d 65 73 73 61 67 65 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 2d 73 68 72 69 6e 6b 2d 30 20 73 6d 3a 6d 6c 2d 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 2d 6d 72 2d 31 20 66 6c 65 78 20 70 2d 32 20 72 6f 75 6e 64 65 64 2d 6d 64 20 66 6f 63 75 73 3a 6f Data Ascii: "ml-3 font-medium text-sm text-white truncate" x-text="message"></p> </div> <div class="flex-shrink-0 sm:ml-3"> <button type="button" class="-mr-1 flex p-2 rounded-md focus:o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.9	51036	69.166.1.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	3310	OUT	GET /trinity.json?key_maker=%7B%22203355575348f86%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.A%23header-1%2Cc%3Dv%2Cpm%3D2%3A6%2Cp%3D2%2Cpl%3D4%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2F&s=ce7e0257-0a75-4aec-b185-aeb1c1104b4c&pv=34e84220-e0fb-461b-9ec0-7f82473c9508&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22f596db68-5d7c-4405-b7cf-44eb7f4bdc1f%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2F%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20W [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; HAPLB8G=s85190\|Zkxnw
2024-05-21 09:22:10 UTC	752	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:22:10 GMT content-type: application/json content-length: 426 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:22:09 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxnx; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:22:10 UTC	426	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 32 30 33 33 35 35 35 37 35 33 34 38 66 38 36 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 33 34 65 38 34 32 32 30 2d 65 30 66 62 2d 34 36 31 62 2d 39 65 63 30 2d 37 66 38 32 34 37 33 63 39 35 30 38 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d Data Ascii: {"slots":{"203355575348f86":{}},"sbi_dc":"iad-2-","pv":"34e84220-e0fb-461b-9ec0-7f82473c9508","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/cm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.9	51038	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	925	OUT	GET /dyn/sonobi-usync?uid=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
2024-05-21 09:22:10 UTC	505	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:10 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:10 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873801d8ee88c8a-EWR
2024-05-21 09:22:10 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.9	51040	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	904	OUT	GET /dyn/tplift?uid=929149604929207739274 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
2024-05-21 09:22:10 UTC	486	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: TPLSERCOOKIE=929149604929207739274; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:10 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:10 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873801d9cb47295-EWR
2024-05-21 09:22:10 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.9	51041	172.67.21.232	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	1143	OUT	GET /fpd?_=1716283326048&yv=35705d2&h=custommapposter.com HTTP/1.1 Host: u.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=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%3D
2024-05-21 09:22:10 UTC	333	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Transfer-Encoding: chunked Connection: close set-cookie: kuid=2013b6fe90781036; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:22:10 GMT; Path=/; Domain=.kueezrtb.com; Secure; HTTPOnly; SameSite=None CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873801d9e57436d-EWR
2024-05-21 09:22:10 UTC	419	IN	Data Raw: 31 39 63 0d 0a 39 64 71 47 37 6e 4f 67 4f 34 52 4d 76 49 54 4d 56 68 4f 35 31 34 7a 4e 76 74 4f 75 4f 57 76 5f 65 6c 55 6f 37 6b 46 49 53 73 61 46 4f 34 38 43 6a 6a 56 43 31 6e 71 34 53 4e 6a 4d 65 45 71 55 72 73 58 48 30 68 56 43 50 43 71 6a 5a 6f 7a 43 31 6e 71 34 54 6f 71 76 74 74 4f 67 56 6e 51 43 30 63 46 64 30 6c 76 6f 74 5a 46 61 4f 34 47 57 54 6c 41 35 30 74 51 43 54 73 46 6f 39 74 4f 67 4f 48 55 46 65 64 59 30 53 4e 71 4c 4f 43 51 43 54 73 58 4d 65 63 46 4d 30 6c 55 6f 4f 34 38 43 68 48 7a 43 31 6e 71 75 53 73 55 6b 78 66 61 44 30 63 5a 43 50 43 4f 79 76 35 72 4d 56 49 36 73 50 49 36 43 31 6e 71 75 54 66 61 47 65 45 6a 48 30 74 4f 67 4f 34 72 51 31 34 37 41 56 34 56 51 4f 43 51 43 37 57 6a 6b 78 6c 58 4d 4f 34 38 43 68 57 6a 4e 4f 77 46 5f 37 57 Data Ascii: 19c9dqG7nOgO4RMvITMVhO514zNvtOuOWv_elUo7kFISsaFO48CjjVC1nq4SNjMeEqUrsXH0hVCPCqjZozC1nq4ToqvttOgVnQC0cFd0lvotZFaO4GWTlA50tQCTsFo9tOgOHUFedY0SNqLOCQCTsXMecFM0lUoO48ChHzC1nquSsUkxfaD0cZCPCOyv5rMVI6sPI6C1nquTfaGeEjH0tOgO4rQ147AV4VQOCQC7WjkxlXMO48ChWjNOwF_7W
2024-05-21 09:22:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.9	51033	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	1445	OUT	GET /static-res/css/newsike.css?id=98d7a23ace76a572352b HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283321.0.0.0; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff If-Modified-Since: Tue, 21 May 2024 07:30:56 GMT
2024-05-21 09:22:10 UTC	573	IN	HTTP/1.1 304 Not Modified Date: Tue, 21 May 2024 09:22:10 GMT Connection: close Last-Modified: Tue, 21 May 2024 07:30:56 GMT CF-Cache-Status: HIT Age: 6674 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vofz%2FIJ4Pi3zmuDLIx7TvVwXqX4DlqeMPU6M7Z82Plgl8hMQjkmVFK9gjx4WxG3iZACFjsoEeejb3u1aw0w42CBMWZo6HkkJhe%2FN1xQGD9AzKD%2BdEm7wMmpF3RfvnomLcjHpsQR%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8873801d9dd842ca-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.9	51037	52.46.143.56	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	524	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZkxnuNHM6HMAAHezAHb--QAAA9cAAAIB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:10 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 0KKMPYNGE30G9KYAGKGP Set-Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 09:22:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 09:22:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.9	51032	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	926	OUT	GET /dyn/qc-usync?&uid=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
2024-05-21 09:22:10 UTC	505	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:10 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:10 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873801dc9c74235-EWR
2024-05-21 09:22:10 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.9	51031	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	915	OUT	GET /dyn/ix-usync?uid=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
2024-05-21 09:22:10 UTC	493	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:10 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:10 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873801e0f780c7e-EWR
2024-05-21 09:22:10 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.9	51030	52.94.223.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	1012	OUT	GET /s/v3/pr?exlist=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_an-db5_n-adYouLike_3lift_n-Outbrain Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:10 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 2788 Connection: close x-amz-rid: P0VKD2APXCDP6SQQ7740 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:10 UTC	2788	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 61 35 65 39 64 31 34 65 2d 62 31 66 36 2d 34 66 65 63 2d 62 32 63 36 2d 31 64 30 37 34 65 63 65 39 34 65 35 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 64 2e 73 6d 61 61 74 6f 2e 6e 65 74 2f 63 2f 3f 61 64 45 78 49 6e 69 74 3d 61 70 73 26 72 65 64 69 72 3d 68 74 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="a5e9d14e-b1f6-4fec-b2c6-1d074ece94e5"> body { background-color:transparent } </style></head><body><img width="1" height="1" src="https://s.ad.smaato.net/c/?adExInit=aps&redir=ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.9	51051	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	672	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=s.d&u=7bde16b5-414f-4c99-b45a-259240a801e0 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:10 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180426 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:10 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.9	51035	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	920	OUT	GET /dyn/cons-us?user_id=c0c42e7a5092458e842e7a5092558e63 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
2024-05-21 09:22:10 UTC	499	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:10 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:10 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873801e1a1f4373-EWR
2024-05-21 09:22:10 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.9	51039	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	924	OUT	GET /dyn/mgid-us?user_id=87977e68-6187-4e81-a1fa-160458044ff2 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
2024-05-21 09:22:10 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; Domain=infolinks.com; Expires=Tue, 04-Jun-2024 09:22:10 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:10 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8873801e897043f9-EWR
2024-05-21 09:22:10 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.9	51061	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	1429	OUT	GET /static-res/js/newsike.js?id=2e2993cb3d75bb3492b1 HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283321.0.0.0; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff If-Modified-Since: Tue, 21 May 2024 09:10:49 GMT
2024-05-21 09:22:10 UTC	570	IN	HTTP/1.1 304 Not Modified Date: Tue, 21 May 2024 09:22:10 GMT Connection: close Last-Modified: Tue, 21 May 2024 09:10:49 GMT CF-Cache-Status: HIT Age: 681 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v0voEOuXYI4n6dRluktkWGMB2B06VYyT55jiKefHLfh9qhzYhcBWrCsIcB3c1OQDkcZjRx%2BeE%2Fj4Dpm6qyq8OSXCoBDTExH%2FMfyDBBlzj3Ez6sfDx9dDLt0IZlk8pRTROiwWZpgp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8873801e8b4ac42a-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.9	51068	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	3236	OUT	GET /gampad/ads?pvsid=2273347548520925&correlator=3220266305235650&eid=31083354%2C31083555%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405090101&ptt=17&impl=fif&iu_parts=20842576%3A23078258603%2CKJI01M%2CKJI01M-DDI.F&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=7&sfv=1-0-40&ifs=%5B%5B%5B2%2C1%5D%5D%5D&eri=1&sc=1&cookie=ID%3D5706e9f287f5cbb0%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ&gpic=UID%3D00000e2670b2592b%3AT%3D1716283300%3ART%3D1716283300%3AS%3DALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA&abxe=1&dt=1716283328709&lmt=1716004133&adxs=803&adys=129&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&uas=0&url=https%3A%2F%2Fcustommapposter.com%2F&vis [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://custommapposter.com X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkf3t8olHR_EUxNf4hTrwYC4PEPFkhlitpzMntdPttbPKRAr_J8sFUOaajViP8
2024-05-21 09:22:11 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Tue, 21 May 2024 09:22:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:22:11 UTC	418	IN	Data Raw: 31 39 62 0d 0a 7b 22 2f 32 30 38 34 32 35 37 36 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 4d 4f 4c 70 4e 4b 31 6e 6f 59 44 46 58 43 55 67 77 63 64 52 6d 6b 4d 63 77 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: 19b{"/20842576/KJI01M/KJI01M-DDI.F":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CMOLpNK1noYDFXCUgwcdRmkMcw",null,null,n
2024-05-21 09:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.9	51094	172.66.42.247	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	921	OUT	GET /dyn/emodo-us?uid=cb2dc2ef-726a-48b8-b89a-4495efb3863c HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=076f169c-b430-40e2-985d-6d2a7145d512; ANUSERCOOKIE=6403784576581203868; IQMUS=e714687a-b06b-42cd-94cc-eea520c604e9; VRUSERCOOKIE=y-8l96AatE2uJ3ICZw0_GTNOnLuq644SkQ~A; SONOBIUSERCOOKIE=054b4136-01f6-45be-b12f-751883821122; TPLSERCOOKIE=929149604929207739274; QCUSERCOOKIE=UZnUs1GYgbJKzoPkBZ_N5VeZ07RKmNPiAcr3Rc8s; IXUSERCOOKIE=ZkxnuNHM6HMAAHezAHb..QAA&983; CONSUSERCOOKIE=c0c42e7a5092458e842e7a5092558e63; MGIDUSERCOOKIE=87977e68-6187-4e81-a1fa-160458044ff2; EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c
2024-05-21 09:22:11 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: EMDOUSERCOOKIE=cb2dc2ef-726a-48b8-b89a-4495efb3863c; Domain=infolinks.com; Expires=Mon, 19-Aug-2024 09:22:10 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Sun, 21 May 2023 09:22:10 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 887380229a87427c-EWR
2024-05-21 09:22:11 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.9	51067	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	668	OUT	POST /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 1117 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#2
2024-05-21 09:22:10 UTC	1117	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 63 64 61 65 37 37 38 2d 66 30 38 38 2d 34 62 32 62 2d 62 39 62 62 2d 66 61 32 62 63 34 65 31 39 65 65 61 22 2c 22 72 65 71 75 65 73 74 43 6f 75 6e 74 22 3a 31 2c 22 72 6f 6c 65 22 3a 22 6c 65 61 64 65 72 22 2c 22 63 61 63 68 65 49 64 22 3a 22 37 30 33 33 30 33 38 38 35 34 32 31 30 31 38 33 22 2c 22 72 65 66 72 65 73 68 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 36 35 22 2c 22 70 61 72 74 6e 65 72 22 3a 31 30 31 33 2c 22 76 22 3a 22 31 2e 30 2e 36 35 22 2c 22 6f 22 3a 22 61 70 69 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 Data Ascii: {"requests":[{"requestId":"2cdae778-f088-4b2b-b9bb-fa2bc4e19eea","requestCount":1,"role":"leader","cacheId":"7033038854210183","refresh":false,"sourceVersion":"1.0.65","partner":1013,"v":"1.0.65","o":"api","tml":"https://custommapposter.com/","ref":null,"
2024-05-21 09:22:11 UTC	584	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:22:11 GMT vary: Accept-Encoding p3p: CP="CAO PSA OUR" set-cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#3; Path=/; Domain=id5-sync.com; Expires=Mon, 19 Aug 2024 09:22:11 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://custommapposter.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:22:11 UTC	655	IN	Data Raw: 32 38 38 0d 0a 7b 22 67 65 6e 65 72 69 63 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 6b 38 72 44 62 5f 48 6a 49 51 66 67 54 44 6c 39 61 54 38 36 4c 30 4e 52 62 45 36 4a 56 4e 55 65 69 41 41 51 5a 39 4f 4c 70 75 79 4e 4d 79 35 6a 76 6d 57 6b 50 58 53 46 67 67 59 4e 58 4d 6b 62 6f 69 4b 37 62 6c 43 35 4a 52 61 73 63 58 69 4d 73 4e 55 33 59 51 36 7a 64 69 52 71 77 4d 48 46 7a 31 6b 32 38 51 76 5f 6c 58 64 38 49 39 53 38 47 5f 31 38 6b 64 54 34 75 36 7a 62 38 46 47 54 50 34 4e 52 4a 36 43 4b 64 44 6e 53 63 58 6f 5a 49 41 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 31 54 30 39 3a 32 31 3a 33 33 2e 36 30 35 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 Data Ascii: 288{"generic":{"signature":"ID5_Ak8rDb_HjIQfgTDl9aT86L0NRbE6JVNUeiAAQZ9OLpuyNMy5jvmWkPXSFggYNXMkboiK7blC5JRascXiMsNU3YQ6zdiRqwMHFz1k28Qv_lXd8I9S8G_18kdT4u6zb8FGTP4NRJ6CKdDnScXoZIA","created_at":"2024-05-21T09:21:33.605Z","id5_consent":true,"original_uid
2024-05-21 09:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.9	51084	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:10 UTC	1028	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 1092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283309626:1716283309626
2024-05-21 09:22:10 UTC	1092	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 35 32 36 31 2d 32 32 39 36 2d 30 31 22 2c 22 63 6d 70 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 31 31 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 32 38 39 36 39 2c 22 74 74 66 62 22 3a 38 32 36 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 32 32 32 31 31 64 38 35 36 64 65 31 30 35 62 66 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 22 3a 22 36 30 36 30 63 32 32 62 2d 30 64 66 63 2d 34 38 38 Data Ascii: {"url":"https://custommapposter.com/","publisherToken":"5261-2296-01","cmp":false,"timeout":1100,"version":"8.46.0","connectionType":"fixed","auctionStart":1716283328969,"ttfb":826,"bidRequests":[{"id":"22211d856de105bf","transactionId":"6060c22b-0dfc-488
2024-05-21 09:22:11 UTC	1128	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 21 May 2024 09:22:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 11 Vary: X-HTTP-Method-Override Set-Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; Max-Age=31536000; Domain=.seedtag.com; Path=/; Expires=Wed, 21 May 2025 09:22:11 GMT; Secure; SameSite=None Set-Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; Max-Age=2592000; Domain=.seedtag.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:11 GMT; HttpOnly; Secure; SameSite=None Observe-Browsing-Topics: ?1 Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:11 UTC	11	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 7d Data Ascii: {"bids":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.9	51079	172.217.16.193	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:11 UTC	859	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 2a259ff2a1bbf1c711ae44c0a054e408.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:11 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 21 May 2024 09:22:11 GMT Expires: Wed, 21 May 2025 09:22:11 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:11 UTC	683	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-05-21 09:22:11 UTC	1390	IN	Data Raw: 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 61 28 61 29 7d 3b 76 61 72 20 65 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 65 61 3f 61 3a 22 22 7d 3b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: urn t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(
2024-05-21 09:22:11 UTC	1390	IN	Data Raw: 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 3d 64 7c 7c 30 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6b 3d 5b 5d 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 6b 2e 70 75 73 68 28 70 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 71 61 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e Data Ascii: .split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(Strin
2024-05-21 09:22:11 UTC	1390	IN	Data Raw: 3b 28 7b 7d 29 5b 33 5d 3d 64 61 28 70 28 6e 65 77 20 6e 28 6c 2c 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 61 64 73 2f 72 69 63 68 6d 65 64 69 61 2f 73 74 75 64 69 6f 5f 63 61 6e 61 72 79 2f 6d 75 2f 74 65 6d 70 6c 61 74 65 73 2f 68 69 66 69 2f 68 69 66 69 5f 63 61 6e 61 72 79 2e 6a 73 22 29 29 29 3b 76 61 72 20 75 61 3d 2f 5e 28 5b 5e 3b 5d 2b 29 3b 28 5c 64 2b 29 3b 28 5b 5c 73 5c 53 5d 2a 29 24 2f 3b 76 61 72 20 76 61 3d 2f 5e 28 5b 61 2d 7a 30 2d 39 5d 28 5b 61 2d 7a 30 2d 39 2d 5d 7b 30 2c 36 31 7d 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 73 61 66 65 66 72 61 6d 65 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 74 70 63 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 73 65 63 75 Data Ascii: ;({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S]*)$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secu
2024-05-21 09:22:11 UTC	1309	IN	Data Raw: 74 22 2c 35 30 37 29 3b 76 2e 65 72 72 6f 72 26 26 76 2e 6d 65 74 61 26 26 76 2e 69 64 7c 7c 28 76 3d 6e 65 77 20 68 61 29 3b 69 66 28 76 2e 6d 73 67 29 7b 76 61 72 20 43 61 3d 76 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 49 2e 67 2e 70 75 73 68 28 32 29 3b 49 2e 68 5b 32 5d 3d 7a 28 22 6d 73 67 22 2c 43 61 29 7d 76 61 72 20 44 61 3d 5b 76 2e 6d 65 74 61 7c 7c 7b 7d 5d 3b 49 2e 67 2e 70 75 73 68 28 33 29 3b 49 2e 68 5b 33 5d 3d 44 61 3b 76 61 72 20 4a 3d 66 2c 4b 3d 5b 5d 2c 4c 2c 4d 3d 6e 75 6c 6c 2c 4e 3b 64 6f 7b 4e 3d 4a 3b 76 61 72 20 50 3b 74 72 79 7b 76 61 72 20 51 3b 69 66 28 51 3d 21 21 4e 26 26 6e 75 6c 6c 21 3d 4e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 77 28 4e 2e 66 6f 6f 29 3b 51 3d 21 30 3b Data Ascii: t",507);v.error&&v.meta&&v.id\|\|(v=new ha);if(v.msg){var Ca=v.msg.substring(0,512);I.g.push(2);I.h[2]=z("msg",Ca)}var Da=[v.meta\|\|{}];I.g.push(3);I.h[3]=Da;var J=f,K=[],L,M=null,N;do{N=J;var P;try{var Q;if(Q=!!N&&null!=N.location.href)b:{try{w(N.foo);Q=!0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.9	51095	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:11 UTC	1369	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283328986&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:11 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:11 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 795 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:11 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:11 UTC	795	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.9	51096	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
2024-05-21 09:22:12 UTC	3675	OUT	Data Raw: 7b 22 61 22 3a 22 36 33 64 36 62 39 64 38 2d 65 61 36 65 2d 34 62 63 65 2d 38 30 39 33 2d 63 31 39 63 62 32 61 66 36 31 61 32 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 32 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 32 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"63d6b9d8-ea6e-4bce-8093-c19cb2af61a2","B":0,"b":"custommapposter.com","brc":2,"bwc":0,"trc":2,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:12 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:11 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=8_1716283291_1716283332; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:12 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 23 connection: close
2024-05-21 09:22:12 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 4b 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4e 6a 4e 6b 4e 6d 49 35 5a 44 67 74 5a 57 45 32 5a 53 30 30 59 6d 4e 6c 4c 54 67 77 4f 54 4d 74 59 7a 45 35 59 Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgKIA5vPsbIGqAM06gMkNjNkNmI5ZDgtZWE2ZS00YmNlLTgwOTMtYzE5Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.9	51099	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1708 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:12 UTC	1708	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 30 32 31 31 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283330211,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:12 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:12 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:22:12 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 33 35 39 66 34 36 34 32 35 32 30 66 30 64 32 37 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"359f4642520f0d27","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.9	51097	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAQgBCgEMLzPsbIGOARABEgEELzPsbIGGAM.
2024-05-21 09:22:12 UTC	1189	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 33 35 32 61 36 38 61 31 30 32 35 63 63 36 62 32 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250},{"width":160,"height":600},{"width":300,"height":600}],"primary_size":{"width":300,"height":250},"ad_types":["video","banner"],"uuid":"352a68a1025cc6b2","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule"
2024-05-21 09:22:12 UTC	1592	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16383 Connection: close Vary: Accept-Encoding Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 0ff73db3-60f0-4226-b05e-46e7be79df3c Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:12 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChkI__eVARAKGAUgBSgFMMTPsbIGOAVABUgFEMTPsbIGGAQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:12 UTC	14792	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 33 35 32 61 36 38 61 31 30 32 35 63 63 36 62 32 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 33 31 34 31 36 30 32 35 31 39 35 33 34 39 32 37 33 39 30 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 73 33 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 26 65 3d 77 71 54 5f 33 51 4c 76 44 71 42 76 42 77 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"352a68a1025cc6b2","tag_id":32542723,"auction_id":"3141602519534927390","nobid":false,"no_ad_url":"https://ams3-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&e=wqT_3QLvDqBvBw
2024-05-21 09:22:12 UTC	1591	IN	Data Raw: 54 58 70 50 61 6c 6c 33 54 58 70 49 5a 30 45 33 62 45 64 6e 51 56 52 76 62 47 46 4e 54 32 6c 42 56 48 52 73 59 55 31 50 61 30 46 52 51 6d 31 42 55 55 56 31 5a 31 46 68 51 30 38 77 53 55 55 46 50 42 68 42 51 55 46 4f 51 56 39 48 45 51 77 73 51 55 46 42 53 55 74 70 59 6e 4e 43 53 45 4a 43 41 51 30 42 41 52 42 4f 51 56 39 35 55 52 30 68 47 45 35 6e 52 55 46 51 52 55 55 42 47 77 6b 42 5a 45 4e 4a 51 6c 6b 34 64 6d 74 42 56 33 6c 31 4d 32 6c 5a 51 6d 4a 79 53 58 70 4a 64 30 4a 78 55 56 56 42 43 51 45 55 52 48 64 51 4e 30 56 47 43 51 77 42 41 51 68 45 51 6b 49 64 54 77 42 35 4c 69 67 41 41 44 6b 79 4b 41 41 41 57 68 55 6f 4a 58 7a 77 50 6c 68 74 63 45 46 51 64 30 4a 6d 64 58 6f 77 64 33 59 30 51 6d 46 78 61 54 42 42 55 30 4e 43 5a 30 35 57 56 54 42 54 53 55 4a Data Ascii: TXpPall3TXpIZ0E3bEdnQVRvbGFNT2lBVHRsYU1Pa0FRQm1BUUV1Z1FhQ08wSUUFPBhBQUFOQV9HEQwsQUFBSUtpYnNCSEJCAQ0BARBOQV95UR0hGE5nRUFQRUUBGwkBZENJQlk4dmtBV3l1M2lZQmJySXpJd0JxUVVBCQEURHdQN0VGCQwBAQhEQkIdTwB5LigAADkyKAAAWhUoJXzwPlhtcEFQd0JmdXowd3Y0QmFxaTBBU0NCZ05WVTBTSUJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.9	51098	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 2317 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:12 UTC	2317	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 33 35 36 32 65 63 66 61 39 66 66 39 61 30 61 64 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 37 61 63 65 36 38 62 34 2d 39 38 33 62 2d 34 62 37 31 2d 62 39 35 63 2d 37 66 36 64 37 34 33 33 31 63 32 34 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 2c 31 36 30 78 36 30 30 2c 33 30 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f Data Ascii: {"Version":"1.0","Bids":{"3562ecfa9ff9a0ad":{"PlacementID":"ffd2f3e5d8d521d3e956b94b85e3cf84","TransactionID":"7ace68b4-983b-4b71-b95c-7f6d74331c24","Width":300,"Height":250,"AvailableSizes":"300x250,160x600,300x600","SChain":{"ver":"1.0","complete":1,"no
2024-05-21 09:22:12 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:12 GMT content-length: 538 x-envoy-upstream-service-time: 96 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:12 UTC	538	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 65 32 35 38 33 63 31 38 63 39 39 36 37 36 37 63 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 65 32 35 38 33 63 31 38 63 39 39 36 37 36 37 63 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 42 69 64 49 44 22 3a 22 33 35 37 63 33 32 39 37 63 61 62 61 66 35 63 32 22 7d 2c 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 38 62 65 65 31 61 35 63 32 66 30 33 64 66 36 65 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 66 66 64 32 66 33 Data Ascii: [{"Price":0,"Attempt":"e2583c18c996767c210a38a5ef434f94","Placement":"210a38a5ef434f943203dcfa1a13deed","CreativeID":"e2583c18c996767c210a38a5ef434f94","BidID":"357c3297cabaf5c2"},{"Price":0,"Attempt":"8bee1a5c2f03df6effd2f3e5d8d521d3","Placement":"ffd2f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.9	51100	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1135 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAQgBCgEMLzPsbIGOARABEgEELzPsbIGGAM.
2024-05-21 09:22:12 UTC	1135	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 31 36 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 33 36 35 32 30 39 61 36 31 61 65 32 37 65 35 36 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 Data Ascii: {"tags":[{"sizes":[{"width":160,"height":600}],"primary_size":{"width":160,"height":600},"ad_types":["video","banner"],"uuid":"365209a61ae27e56","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"
2024-05-21 09:22:12 UTC	1567	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 144 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: b50e86a4-e173-4d09-9157-d264edd82cf6 Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:12 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChkI__eVARAKGAUgBSgFMMTPsbIGOAVABUgFEMTPsbIGGAQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:12 UTC	144	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 33 36 35 32 30 39 61 36 31 61 65 32 37 65 35 36 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 34 32 37 30 36 35 39 39 32 37 35 38 32 33 32 38 36 39 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 35 30 31 34 34 34 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"365209a61ae27e56","tag_id":32542723,"auction_id":"427065992758232869","nobid":true,"ad_profile_id":501444}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.9	51103	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1688 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:12 UTC	1688	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 30 34 38 37 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283330487,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:12 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:12 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:22:12 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 33 37 38 39 65 30 61 31 37 61 31 61 32 37 32 61 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"3789e0a17a1a272a","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.9	51102	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3635 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=7_1716283291_1716283325
2024-05-21 09:22:12 UTC	3635	OUT	Data Raw: 7b 22 61 22 3a 22 66 33 30 35 32 30 62 35 2d 34 32 35 66 2d 34 39 37 62 2d 39 61 32 35 2d 65 38 65 37 35 32 34 31 36 62 64 32 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 32 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 32 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"f30520b5-425f-497b-9a25-e8e752416bd2","B":0,"b":"custommapposter.com","brc":2,"bwc":0,"trc":2,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:12 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:11 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=8_1716283291_1716283332; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:12 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 7 connection: close
2024-05-21 09:22:12 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 4b 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 5a 6a 4d 77 4e 54 49 77 59 6a 55 74 4e 44 49 31 5a 69 30 30 4f 54 64 69 4c 54 6c 68 4d 6a 55 74 5a 54 68 6c 4e Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgKIA5vPsbIGqAM06gMkZjMwNTIwYjUtNDI1Zi00OTdiLTlhMjUtZThlN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.9	51101	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1670 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:12 UTC	1670	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 33 37 35 31 35 61 36 64 38 32 64 66 37 34 31 37 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 38 35 61 30 37 64 64 36 2d 66 64 33 64 2d 34 31 38 64 2d 62 37 65 36 2d 65 31 31 32 31 32 62 65 37 31 38 66 22 2c 22 57 69 64 74 68 22 3a 31 36 30 2c 22 48 65 69 67 68 74 22 3a 36 30 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 31 36 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"37515a6d82df7417":{"PlacementID":"210a38a5ef434f943203dcfa1a13deed","TransactionID":"85a07dd6-fd3d-418d-b7e6-e11212be718f","Width":160,"Height":600,"AvailableSizes":"160x600","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:22:12 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:12 GMT content-length: 181 x-envoy-upstream-service-time: 129 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:12 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 39 65 37 63 36 61 61 64 36 39 33 66 65 33 62 35 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 39 65 37 63 36 61 61 64 36 39 33 66 65 33 62 35 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 42 69 64 49 44 22 3a 22 33 37 35 31 35 61 36 64 38 32 64 66 37 34 31 37 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"9e7c6aad693fe3b5210a38a5ef434f94","Placement":"210a38a5ef434f943203dcfa1a13deed","CreativeID":"9e7c6aad693fe3b5210a38a5ef434f94","BidID":"37515a6d82df7417"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.9	51107	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	672	OUT	GET /mmt.gif?s=ab328146-0322-4cbd-b4f4-4eb3b7a05dc3&a=z.r&u=c992f38f-79ee-483b-a206-98cc8db521aa HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:12 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180428 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:12 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.9	51109	35.186.236.140	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:12 UTC	739	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=p.f.i&u=KJI01M&d=%7B%22b%22%3A%22chrome%22%2C%22c%22%3A%22US%22%2C%22r%22%3A%22NY%22%2C%22p%22%3A%22%2F%22%7D HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:13 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180429 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:13 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.9	51106	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	1512	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283330491&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:14 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:14 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 660 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:14 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:14 UTC	660	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.9	51104	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	1512	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331453&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=160&maxh=600&si=1105836&pi=3&bf=160x600&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:14 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:14 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:14 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:14 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.9	51108	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	1506	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331458&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:14 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:14 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:14 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:14 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.9	51105	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	1512	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283331467&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-4341eb8a-cada-4d0a-9fc1-fe0fe64f585f_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDI.F%23repeatable-6&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:14 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:14 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:14 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:14 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.9	51111	185.64.190.79	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	2083	OUT	GET /AdServer/ImgSync?p=159988&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dpubmatics2s%26userId%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:14 UTC	1011	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://sync.cootlogix.com/api/cookie?partnerId=pubmatics2s&userId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&us_privacy= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=159988^https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dpubmatics2s%26userId%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=159988:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 21 May 2024 09:22:14 GMT Content-Length: 175 Connection: close
2024-05-21 09:22:14 UTC	175	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 6f 6f 74 6c 6f 67 69 78 2e 63 6f 6d 2f 61 70 69 2f 63 6f 6f 6b 69 65 3f 70 61 72 74 6e 65 72 49 64 3d 70 75 62 6d 61 74 69 63 73 32 73 26 61 6d 70 3b 75 73 65 72 49 64 3d 39 43 36 34 43 41 32 31 2d 35 30 41 44 2d 34 34 44 31 2d 39 41 41 37 2d 34 46 32 42 41 34 36 44 31 37 31 42 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.cootlogix.com/api/cookie?partnerId=pubmatics2s&userId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&us_privacy=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.9	51112	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3635 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=8_1716283291_1716283332
2024-05-21 09:22:14 UTC	3635	OUT	Data Raw: 7b 22 61 22 3a 22 38 32 65 66 62 38 31 61 2d 39 38 30 65 2d 34 64 38 65 2d 38 30 64 61 2d 39 66 38 36 36 34 31 36 64 38 35 38 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 32 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 32 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"82efb81a-980e-4d8e-80da-9f866416d858","B":0,"b":"custommapposter.com","brc":2,"bwc":0,"trc":2,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:14 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1114 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:14 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=9_1716283291_1716283334; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:14 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close
2024-05-21 09:22:14 UTC	1114	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 41 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 4b 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4f 44 4a 6c 5a 6d 49 34 4d 57 45 74 4f 54 67 77 5a 53 30 30 5a 44 68 6c 4c 54 67 77 5a 47 45 74 4f 57 59 34 4e Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqACShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgKIA5vPsbIGqAM06gMkODJlZmI4MWEtOTgwZS00ZDhlLTgwZGEtOWY4N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.9	51113	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1135 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAUgBSgFMMTPsbIGOAVABUgFEMTPsbIGGAQ.
2024-05-21 09:22:14 UTC	1135	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 34 32 39 61 62 39 36 62 35 35 30 63 36 39 34 37 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["video","banner"],"uuid":"429ab96b550c6947","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":2,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.9	51118	81.17.55.122	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	796	OUT	GET /api/sync?callerId=2 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz\|130:3d12ee56-7200-483f-ad58-25321367cbba
2024-05-21 09:22:15 UTC	142	IN	HTTP/1.1 404 Not Found date: Tue, 21 May 2024 09:22:14 GMT content-type: text/plain; charset=utf-8 content-length: 9 connection: close
2024-05-21 09:22:15 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.9	51114	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	944	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1668 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:14 UTC	1668	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 34 35 35 31 66 32 65 37 64 61 38 30 30 65 39 61 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 32 66 39 37 64 34 65 32 2d 36 62 34 61 2d 34 65 34 32 2d 39 32 32 31 2d 65 36 63 63 31 65 65 32 65 31 64 37 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 Data Ascii: {"Version":"1.0","Bids":{"4551f2e7da800e9a":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"2f97d4e2-6b4a-4e42-9221-e6cc1ee2e1d7","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monu
2024-05-21 09:22:15 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:14 GMT content-length: 181 x-envoy-upstream-service-time: 126 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:15 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 34 37 61 39 31 63 63 38 35 32 36 63 66 64 65 33 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 34 37 61 39 31 63 63 38 35 32 36 63 66 64 65 33 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 34 35 35 31 66 32 65 37 64 61 38 30 30 65 39 61 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"47a91cc8526cfde34bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"47a91cc8526cfde34bfb0857db316efd","BidID":"4551f2e7da800e9a"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.9	51116	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:14 UTC	774	OUT	GET /usersync2/rmpssp?sub=amazon&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-21 09:22:15 UTC	855	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:15 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222069.5%22%7D; path=/; expires=Wed, 21 May 2025 09:22:15 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://image8.pubmatic.com/AdServer/ImgSync?p=159277&pu=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2069.5%2F%23PMUID%3Fzcc%3D0%26sspret%3D1&rndcb=8878711658 etag: RX8049d3ed2f50405b8cd5dc9be6476848003 connection: close
2024-05-21 09:22:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.9	51110	54.218.45.230	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:15 UTC	586	OUT	OPTIONS /logevent/putRecords?encoded=true HTTP/1.1 Host: prod.tahoe-analytics.publishers.advertising.a2z.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-api-key Origin: https://custommapposter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:15 UTC	417	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:15 GMT Content-Type: application/json Content-Length: 0 Connection: close x-amzn-RequestId: c86aa1bc-61de-4778-86c8-cf0b94354ddd Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent x-amz-apigw-id: YHUnLFq-vHcEW8A= Access-Control-Allow-Methods: POST,OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.9	51127	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:15 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1116 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAUgBSgFMMTPsbIGOAVABUgFEMTPsbIGGAQ.
2024-05-21 09:22:15 UTC	1116	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 76 69 64 65 6f 22 2c 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 34 34 33 36 61 39 37 65 35 37 30 64 31 66 34 61 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 67 70 69 64 22 3a 22 2f 32 30 38 34 32 35 37 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["video","banner"],"uuid":"4436a97e570d1f4a","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"gpid":"/2084257
2024-05-21 09:22:15 UTC	1592	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:15 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16337 Connection: close Vary: Accept-Encoding Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: f409443d-2c34-4aa4-b1da-c98aecb4ee6b Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:15 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChkI__eVARAKGAYgBigGMMfPsbIGOAZABkgGEMfPsbIGGAU.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:15 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:15 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:15 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:15 UTC	14792	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 34 34 33 36 61 39 37 65 35 37 30 64 31 66 34 61 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 34 38 36 36 32 38 37 39 31 35 31 31 34 32 31 33 34 35 37 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 73 33 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 61 72 74 69 63 6c 65 25 32 46 74 6f 70 25 32 46 39 32 36 26 65 3d 77 71 54 5f 33 51 4c 74 44 71 42 74 42 77 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"4436a97e570d1f4a","tag_id":32542723,"auction_id":"4866287915114213457","nobid":false,"no_ad_url":"https://ams3-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&e=wqT_3QLtDqBtBw
2024-05-21 09:22:15 UTC	1545	IN	Data Raw: 46 52 51 6d 31 42 55 55 56 31 5a 31 46 68 51 30 38 77 53 55 55 46 50 42 68 42 51 55 46 4f 51 56 39 48 45 51 77 73 51 55 46 42 53 55 74 70 59 6e 4e 43 53 45 4a 43 41 51 30 42 41 52 42 4f 51 56 39 35 55 52 30 68 47 45 35 6e 52 55 46 51 52 55 55 42 47 77 6b 42 59 45 4e 4a 51 6d 52 46 64 6d 74 42 56 33 6c 31 4d 32 6c 5a 51 6d 52 44 61 7a 68 4a 64 30 4a 78 55 56 55 4a 48 78 68 42 52 48 64 51 4e 30 56 47 44 51 30 55 51 55 46 42 52 45 4a 43 48 55 38 41 65 53 34 6f 41 41 41 35 4d 69 67 41 41 46 6f 56 4b 41 42 51 49 58 7a 77 50 6c 68 50 61 46 46 51 64 30 4a 6b 4e 7a 67 7a 64 33 59 30 51 6d 46 78 61 54 42 42 55 30 4e 43 5a 30 35 57 56 54 42 54 53 55 4a 6e 55 31 46 43 5a 30 64 5a 51 6d 64 44 61 45 4a 30 64 6a 56 6d 62 58 45 34 5a 45 38 34 58 33 46 42 57 55 56 7a 5a Data Ascii: FRQm1BUUV1Z1FhQ08wSUUFPBhBQUFOQV9HEQwsQUFBSUtpYnNCSEJCAQ0BARBOQV95UR0hGE5nRUFQRUUBGwkBYENJQmRFdmtBV3l1M2lZQmRDazhJd0JxUVUJHxhBRHdQN0VGDQ0UQUFBREJCHU8AeS4oAAA5MigAAFoVKABQIXzwPlhPaFFQd0JkNzgzd3Y0QmFxaTBBU0NCZ05WVTBTSUJnU1FCZ0dZQmdDaEJ0djVmbXE4ZE84X3FBWUVzZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.9	51115	13.32.27.65	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:15 UTC	644	OUT	GET /c/?adExInit=aps&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:15 UTC	644	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Tue, 21 May 2024 09:22:15 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=2529e00f0e; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMaps=2529e00f0e; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=smaato.com&id=2529e00f0e X-Cache: Miss from cloudfront Via: 1.1 8e83c42d247a31c5b365c08a0352d8f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: 2q0t6z4mfe3FN6t62NPN0uYkKdNUqyJuIruym3KjZ0hpZAXOpLc8zQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.9	51190	54.218.45.230	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:16 UTC	750	OUT	POST /logevent/putRecords?encoded=true HTTP/1.1 Host: prod.tahoe-analytics.publishers.advertising.a2z.com Connection: keep-alive Content-Length: 608 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: 79db72eb0b5c7255afa54a253df24fb4a5ac916bf40b51c730df8850aa5665ca sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:16 UTC	608	OUT	Data Raw: 7b 22 52 65 63 6f 72 64 73 22 3a 5b 7b 22 44 61 74 61 22 3a 22 65 79 4a 6c 64 6d 56 75 64 46 4e 76 64 58 4a 6a 5a 53 49 36 49 6d 46 77 63 31 39 33 5a 57 4a 66 59 32 78 70 5a 57 35 30 58 32 78 70 59 6e 4a 68 63 6e 6b 69 4c 43 4a 6c 64 6d 56 75 64 46 52 70 62 57 55 69 4f 69 49 78 4e 7a 45 32 4d 6a 67 7a 4d 7a 49 31 4f 44 45 78 49 69 77 69 5a 58 5a 6c 62 6e 52 44 59 58 52 6c 5a 32 39 79 65 53 49 36 49 6d 5a 6c 59 58 51 69 4c 43 4a 6c 64 6d 56 75 64 45 35 68 62 57 55 69 4f 69 4a 66 62 47 56 6e 59 57 4e 35 4c 32 5a 6c 64 47 4e 6f 51 6d 6c 6b 63 79 39 33 61 57 78 73 52 58 68 6c 59 33 56 30 5a 53 49 73 49 6d 56 32 5a 57 35 30 55 48 4a 76 63 47 56 79 64 47 6c 6c 63 79 49 36 65 79 4a 30 61 57 31 6c 63 6e 4d 69 4f 6e 73 69 63 32 6c 75 59 32 56 44 63 6d 56 68 64 47 Data Ascii: {"Records":[{"Data":"eyJldmVudFNvdXJjZSI6ImFwc193ZWJfY2xpZW50X2xpYnJhcnkiLCJldmVudFRpbWUiOiIxNzE2MjgzMzI1ODExIiwiZXZlbnRDYXRlZ29yeSI6ImZlYXQiLCJldmVudE5hbWUiOiJfbGVnYWN5L2ZldGNoQmlkcy93aWxsRXhlY3V0ZSIsImV2ZW50UHJvcGVydGllcyI6eyJ0aW1lcnMiOnsic2luY2VDcmVhdG
2024-05-21 09:22:16 UTC	342	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:16 GMT Content-Type: application/json Content-Length: 146 Connection: close x-amzn-RequestId: a6522c4f-7a32-4ac5-ae2f-a39abd5c6dff Access-Control-Allow-Origin: * x-amz-apigw-id: YHUnWHMJvHcEhkw= Access-Control-Allow-Methods: * X-Amzn-Trace-Id: Root=1-664c67c8-30057b6240f9e73370dfba31
2024-05-21 09:22:16 UTC	146	IN	Data Raw: 7b 22 46 61 69 6c 65 64 52 65 63 6f 72 64 43 6f 75 6e 74 22 3a 30 2c 22 52 65 63 6f 72 64 73 22 3a 5b 7b 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 35 31 32 34 36 35 36 31 33 31 37 38 30 38 39 36 39 31 30 31 32 30 31 36 31 36 36 30 33 34 35 31 31 36 33 30 30 32 32 34 36 30 32 30 38 37 35 36 38 32 31 34 36 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 30 30 32 32 22 7d 5d 7d Data Ascii: {"FailedRecordCount":0,"Records":[{"SequenceNumber":"49651246561317808969101201616603451163002246020875682146","ShardId":"shardId-000000000022"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.9	51192	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:16 UTC	1346	OUT	HEAD /?advertisement= HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283321.0.0.0; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff
2024-05-21 09:22:16 UTC	665	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:16 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: immutable, max-age=31536000, public CF-Cache-Status: HIT Age: 264845 Last-Modified: Sat, 18 May 2024 07:48:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2BRwaYHArBuMm%2B%2Fa1%2FE0gMsunkAnprQInAauSrLPJJOGDNMeB40x7%2BdsatAZ8A3h9zoaS6M%2FZ%2Fna0Sqof9PkP5XrteM0kWQHtYeDgsLwCjNSUlfTNMjZV5%2FNU7Tc4ACAsYFjmn1x"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8873804698197c94-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.9	51193	15.197.193.217	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:16 UTC	583	OUT	GET /track/rid?ttd_pid=prebid&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sync.serverbid.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:16 UTC	598	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:16 GMT Content-Type: application/json Content-Length: 109 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://sync.serverbid.com cache-control: private expires: Thu, 20 Jun 2024 09:22:16 GMT set-cookie: TDID=419fdeb2-d93b-4065-8361-053e6f939d20; expires=Wed, 21 May 2025 09:22:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none vary: Origin
2024-05-21 09:22:16 UTC	109	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 34 31 39 66 64 65 62 32 2d 64 39 33 62 2d 34 30 36 35 2d 38 33 36 31 2d 30 35 33 65 36 66 39 33 39 64 32 30 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 35 2d 32 31 54 30 39 3a 32 32 3a 31 36 22 7d Data Ascii: {"TDID":"419fdeb2-d93b-4065-8361-053e6f939d20","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-05-21T09:22:16"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.9	51196	52.94.223.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:16 UTC	751	OUT	GET /s/ecm3?id=6403784576581203868&ex=appnexus.com HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:17 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: QV11CD8RD42E3XVG10JN Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.9	51195	51.89.9.253	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:16 UTC	739	OUT	GET /usync/?pubId=6c68086c0c61793&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:17 UTC	219	IN	HTTP/1.1 200 OK content-type: text/html cache-control: no-transform, no-cache content-length: 2162 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-21 09:22:17 UTC	1343	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 79 6e 63 20 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 76 61 72 20 73 79 6e 63 50 69 78 65 6c 73 20 3d 20 22 22 3b 0a 20 20 20 20 76 61 72 20 73 79 6e 63 49 66 72 61 6d 65 73 20 3d 20 22 22 3b 0a 0a 20 20 20 20 76 61 72 20 47 44 50 52 5f 41 50 50 4c 49 45 53 20 3d 20 22 67 64 70 72 3d 22 3b 0a 20 20 20 20 76 61 72 20 47 44 50 52 20 3d 20 22 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3b 0a 20 20 20 20 76 61 72 20 55 53 5f 50 52 49 56 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Sync Pixels</title></head><body><script> var syncPixels = ""; var syncIframes = ""; var GDPR_APPLIES = "gdpr="; var GDPR = "gdpr_consent="; var US_PRIV
2024-05-21 09:22:17 UTC	819	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 2e 72 65 70 6c 61 63 65 28 22 24 7b 55 53 5f 50 52 49 56 41 43 59 7d 22 2c 20 75 73 50 72 69 76 61 63 79 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 20 3d 20 75 72 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 79 6e 63 49 66 72 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 79 6e 63 46 20 3d 20 73 79 6e 63 49 66 72 61 6d 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 79 6e 63 46 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 79 6e 63 46 2e Data Ascii: ); url = url.replace("${US_PRIVACY}", usPrivacy); new Image().src = url; }); } } if (syncIframes) { var syncF = syncIframes.split(","); if (syncF != null) { syncF.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.9	51191	37.252.171.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:17 UTC	980	OUT	GET /getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAUgBSgFMMTPsbIGOAVABUgFEMTPsbIGGAQ.
2024-05-21 09:22:17 UTC	1503	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.cootlogix.com/api/cookie?partnerId=appnexus&userId=6403784576581203868&gdpr=0&gdpr_consent=&us_privacy=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: c4d09048-3847-4fb5-867d-bd873cd5df4d Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.9	51197	52.208.36.168	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:17 UTC	1143	OUT	GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2NvbnN1bWFibGU6NzI4eDkw&v=5&s=v31hud7ammd&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjkyNTgzNzIsImwiOjU1MjkwOTk1NjYsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREguQSIsInkiOjAsImNvIjowLCJzIjoibW10LTdiZGUxNmI1LTQxNGYtNGM5OS1iNDVhLTI1OTI0MGE4MDFlMF8xXzFfYWQifX0%3D&cb=7376749&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwyTnZibk4xYldGaWJHVTZOekk0ZURrdyIsIndkIjp7ImsuaGJfYmlkZGVyIjoiY29uc3VtYWJsZSIsImsuaGJfc2l6ZSI6IjcyOHg5MCJ9LCJ3ciI6NDB9 HTTP/1.1 Host: protected-by.clarium.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:17 UTC	280	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:17 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx/1.18.0 (Ubuntu) Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Pragma: no-cache Expires: Sat, 26 Jul 1997 05:00:00 GMT
2024-05-21 09:22:17 UTC	74	IN	Data Raw: 34 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 18 57 63 60 60 00 00 00 03 00 01 68 26 59 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 44PNGIHDRIDATWc``h&YIENDB`
2024-05-21 09:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.9	51200	141.95.33.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:17 UTC	768	OUT	GET /i/1013/8.gif?o=api&id5id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&gdpr_consent=undefined&gdpr=false HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#3
2024-05-21 09:22:17 UTC	1713	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#4; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ice.360yield.com/match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-b831dayzF7fOvJBJhVK0CjCAQzhFrom42xthBuZvrg&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F1013%2F124%2F7%2F2.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Tue, 21 May 2024 09:22:17 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:22:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.9	51203	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:17 UTC	1028	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 1109 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283309626:1716283309626
2024-05-21 09:22:17 UTC	1109	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 23 74 6f 63 2d 30 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 35 32 36 31 2d 32 32 39 36 2d 30 31 22 2c 22 63 6d 70 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 31 31 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 36 33 37 38 2c 22 74 74 66 62 22 3a 32 34 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 32 30 33 34 61 31 35 65 38 38 61 62 65 35 35 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 22 Data Ascii: {"url":"https://custommapposter.com/article/top/926#toc-0","publisherToken":"5261-2296-01","cmp":false,"timeout":1100,"version":"8.46.0","connectionType":"fixed","auctionStart":1716283336378,"ttfb":24,"bidRequests":[{"id":"2034a15e88abe55","transactionId"
2024-05-21 09:22:18 UTC	1128	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 21 May 2024 09:22:18 GMT Content-Type: application/json; charset=utf-8 Content-Length: 11 Vary: X-HTTP-Method-Override Set-Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; Max-Age=31536000; Domain=.seedtag.com; Path=/; Expires=Wed, 21 May 2025 09:22:18 GMT; Secure; SameSite=None Set-Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; Max-Age=2592000; Domain=.seedtag.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:18 GMT; HttpOnly; Secure; SameSite=None Observe-Browsing-Topics: ?1 Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:18 UTC	11	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 7d Data Ascii: {"bids":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.9	51208	159.223.96.127	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	1369	OUT	GET /api/cookie?partnerId=pubmatics2s&userId=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=UXU11pe1BCtrg75vC0dBIzEAHAJFRlRKPhN0cEAXXg8FQhIHAiEnQhECUwdGE1YGdyFWXkUCU0VFVlRwexBFUwMEFUBVAHUnFxdQVFdUXEcHcXQRQ1UFB0dIVFQgIUUWVAIAQhJUU3VhWFBSUQYTRFUJeyAWRVBWA0ZAVAYhIEBHAwMXWlJQV3F2RxcBAVFBRFEAIXNEQ1BTVhNHBlVgb1ZEUwADRkhVBCAlQUNVVgIVFlwHdHNHR1YVGVRGVgNzIURLUQAER0hRBHogRUtWA1RDRVATbmFCQAFSAEETB1UkdEYWUwIGTkFWBXdyRBNFGxdARVBXdntBQVEHAxdBBAN1exBGUFYFQklHbG5hFx0SWUFUSlUdYCQQAhUVDw1SDEIHFlZIAVZZBRVJEyUnBABFDRdGUkkTJScEACRYWwUVC0VgeVZQSxVABSAXWDQiFwtFDRdUDUkTMSYHAQ5YW1RKRwcmc0BHBg8MWxRQUnNuQ0FeUhgTSFxVb3FCSwRWAhQWUwkmd1ZeRVRaGB4AUjYqGxwuUxdMUlMCdSZCR1MBURMTBwlwJ0BHVQQDEEADCWBvVhsUflMEEQhUYHkAABJSSA%3D%3D
2024-05-21 09:22:18 UTC	575	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; Domain=.cootlogix.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:18 GMT; Secure; SameSite=None content-type: image/avif content-length: 43 date: Tue, 21 May 2024 09:22:18 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.9	51211	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	1479	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283335562&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&pv=a99257d6-0736-4f08-b84a-48e675fc12b0&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:18 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:18 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 810 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:18 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:18 UTC	810	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.9	51209	185.64.190.79	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	2137	OUT	GET /AdServer/ImgSync?p=159277&pu=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2069.5%2F%23PMUID%3Fzcc%3D0%26sspret%3D1&rndcb=8878711658 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:18 UTC	703	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://sync.1rx.io/usersync3/pubmatic/2069.5/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?zcc=0&sspret=1 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: pi=159277:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=6; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 21 May 2024 09:22:18 GMT Content-Length: 124 Connection: close
2024-05-21 09:22:18 UTC	124	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 33 2f 70 75 62 6d 61 74 69 63 2f 32 30 36 39 2e 35 2f 39 43 36 34 43 41 32 31 2d 35 30 41 44 2d 34 34 44 31 2d 39 41 41 37 2d 34 46 32 42 41 34 36 44 31 37 31 42 3f 7a 63 63 3d 30 26 61 6d 70 3b 73 73 70 72 65 74 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.1rx.io/usersync3/pubmatic/2069.5/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?zcc=0&sspret=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.9	51214	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	647	OUT	GET /static-res/img/newsike/manifest.json?id=6d0a109cbc6d45f4e64b HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 21 May 2024 09:19:45 GMT
2024-05-21 09:22:18 UTC	566	IN	HTTP/1.1 304 Not Modified Date: Tue, 21 May 2024 09:22:18 GMT Connection: close Last-Modified: Tue, 21 May 2024 09:19:45 GMT CF-Cache-Status: HIT Age: 153 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yPVMwFTlm5UCw8YbSfq74dphVV8j5Du4wkHIopfJEfMJ0FzV3V1Q%2BdLuach9aJSwWfwaTCPhgFIWQKcQcIvbqj1xpvPcxZNzVdATWxMmxv0Wy3UXQv9oQBR4lUWu1BGE2I7xIjyX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887380516b086a5e-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.9	51202	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	735	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3704 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=9_1716283291_1716283334
2024-05-21 09:22:18 UTC	3704	OUT	Data Raw: 7b 22 61 22 3a 22 39 36 36 32 66 39 64 64 2d 65 37 35 62 2d 34 61 37 36 2d 62 34 63 31 2d 37 37 38 64 30 34 37 37 39 37 32 66 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"9662f9dd-e75b-4a76-b4c1-778d0477972f","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:18 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1130 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:17 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=10_1716283291_1716283338; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:18 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close
2024-05-21 09:22:18 UTC	1130	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 59 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4f 54 59 32 4d 6d 59 35 5a 47 51 74 5a 54 63 31 59 69 30 30 59 54 63 32 4c 57 49 30 59 7a 45 74 4e 7a 63 34 5a Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqYCShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkOTY2MmY5ZGQtZTc1Yi00YTc2LWI0YzEtNzc4Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.9	51204	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	968	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1673 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:18 UTC	1673	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 32 35 37 35 33 61 37 62 62 63 35 62 36 65 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 37 36 37 66 39 66 64 35 2d 33 39 63 37 2d 34 32 64 33 2d 38 38 33 33 2d 34 31 33 30 35 33 62 34 66 62 65 30 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 6d Data Ascii: {"Version":"1.0","Bids":{"125753a7bbc5b6e":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"767f9fd5-39c7-42d3-8833-413053b4fbe0","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monum
2024-05-21 09:22:18 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:18 GMT content-length: 180 x-envoy-upstream-service-time: 97 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:18 UTC	180	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 33 39 63 36 30 36 33 65 66 31 38 31 64 39 33 35 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 33 39 63 36 30 36 33 65 66 31 38 31 64 39 33 35 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 31 32 35 37 35 33 61 37 62 62 63 35 62 36 65 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"39c6063ef181d9354bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"39c6063ef181d9354bfb0857db316efd","BidID":"125753a7bbc5b6e"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.9	51201	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1717 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:18 UTC	1717	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 36 34 35 35 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283336455,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:18 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:18 GMT Content-Type: application/json Content-Length: 84 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 5 server: istio-envoy
2024-05-21 09:22:18 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 33 33 63 35 34 35 63 31 65 35 63 32 37 39 65 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"33c545c1e5c279e","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.9	51205	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1001 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAYgBigGMMfPsbIGOAZABkgGEMfPsbIGGAU.
2024-05-21 09:22:18 UTC	1001	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 34 38 34 37 37 62 63 34 34 66 31 30 35 64 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 67 70 69 64 22 3a 22 2f 32 30 38 34 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"48477bc44f105d","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":1,"gpid":"/2084
2024-05-21 09:22:18 UTC	1385	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:18 GMT Content-Type: application/json; charset=utf-8 Content-Length: 138 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 4831fc98-133e-4760-b9a6-78a4b9ef5622 Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:18 UTC	138	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 34 38 34 37 37 62 63 34 34 66 31 30 35 64 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 35 34 38 37 39 35 33 32 32 31 32 33 31 37 35 35 37 39 31 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"48477bc44f105d","tag_id":32542723,"auction_id":"5487953221231755791","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.9	51215	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	813	OUT	GET /usersync?ttt=3&src=2&cspi=0&cn=3&spui=&dpui=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: x.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:18 UTC	488	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://ads.pubmatic.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:18 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:18 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.9	51217	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	704	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2892 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:18 UTC	2892	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 23 74 6f 63 2d 30 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926#toc-0","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US"
2024-05-21 09:22:18 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:22:18 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:18 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 30 31 65 38 66 36 34 32 2d 39 30 38 30 2d 34 37 33 36 2d 61 61 63 62 2d 32 37 34 64 61 65 65 65 30 35 32 64 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"01e8f642-9080-4736-aacb-274daeee052d","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.9	51210	52.94.223.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	637	OUT	GET /s/ecm3?ex=smaato.com&id=2529e00f0e HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:18 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Z5SQQZ9NFKKDPFVNMCNH Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.9	51213	208.93.169.131	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	864	OUT	GET /bh/rtset?pid=562763&ev=1&rurl=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5548%26spui%3D%26dpui%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=S5Wxb6bm0jrz; VP=part_S5Wxb6bm0jrz; pb_rtb_ev=3-1rhg\|80p.0.1; pb_rtb_ev_part=3-1rhg\|80p.0.1; INGRESSCOOKIE=0f167cab1ae3fdea
2024-05-21 09:22:18 UTC	898	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-f9646d95d-n4srr cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=S5Wxb6bm0jrz;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 16-May-2025 09:22:18 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_S5Wxb6bm0jrz;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Fri, 16-May-2025 09:22:18 GMT;SameSite=None;Partitioned location: https://x.serverbid.com/usersync?ttt=1&src=2&cspi=0&cn=5548&spui=&dpui=S5Wxb6bm0jrz&ev=1&pid=562763 transfer-encoding: chunked server: Jetty(10.0.14) connection: close
2024-05-21 09:22:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.9	51223	185.89.210.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	850	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1017 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAYgBigGMMfPsbIGOAZABkgGEMfPsbIGGAU.
2024-05-21 09:22:18 UTC	1017	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 34 65 30 61 36 62 30 38 30 36 30 34 30 64 22 2c 22 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 67 70 69 64 22 3a 22 2f 32 30 38 34 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"4e0a6b0806040d","id":32542723,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"position":1,"gpid":"/2084
2024-05-21 09:22:18 UTC	1385	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:18 GMT Content-Type: application/json; charset=utf-8 Content-Length: 138 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: b4ce29aa-b443-495b-b417-e2777b9f8014 Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:18 UTC	138	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 34 65 30 61 36 62 30 38 30 36 30 34 30 64 22 2c 22 74 61 67 5f 69 64 22 3a 33 32 35 34 32 37 32 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 37 35 37 31 30 39 31 35 39 34 30 36 33 34 38 34 31 37 31 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"4e0a6b0806040d","tag_id":32542723,"auction_id":"7571091594063484171","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.9	51212	216.58.206.65	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	555	OUT	GET /rtv/012405101652000/amp4ads-v0.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:18 UTC	1579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 200640 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 20 May 2024 19:26:58 GMT Expires: Tue, 20 May 2025 19:26:58 GMT Cache-Control: public, max-age=31536000 ETag: "34563da1c73ccd0c" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 50120 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 3d 7b 22 76 22 3a 22 30 31 32 34 30 35 31 30 31 36 35 32 30 30 30 22 2c 22 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 61 6c 6c 6f 77 2d 64 6f 63 2d 6f 70 74 2d 69 6e 22 3a 5b 22 61 6d 70 2d 6e 65 78 74 2d 70 61 67 65 22 5d 2c 22 61 6c 6c 6f 77 2d 75 72 6c 2d 6f 70 74 2d 69 6e 22 3a 5b 5d 2c 22 63 61 6e 61 72 79 22 3a 30 2c 22 61 34 61 50 72 6f 66 69 6c 69 6e 67 52 61 74 65 22 3a 30 2e 30 31 2c 22 64 6f 75 62 6c 65 63 6c 69 63 6b 53 72 61 45 78 70 22 3a 30 2e 30 31 2c 22 64 6f 75 62 6c 65 63 6c 69 63 6b 53 72 61 52 65 70 6f 72 74 45 78 63 6c 75 64 65 64 42 6c 6f 63 6b 22 3a 30 2e 31 2c 22 66 6c 65 78 41 64 53 6c 6f 74 73 22 3a 30 2e 30 35 2c 22 66 6c 65 78 69 62 6c 65 2d 62 69 74 72 61 74 65 22 Data Ascii: self.AMP_CONFIG={"v":"012405101652000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate"
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 74 28 28 28 29 3d 3e 7b 74 68 72 6f 77 20 6c 28 69 29 2c 69 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 63 6f 6e 73 74 20 69 3d 68 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 65 63 74 65 64 3d 21 30 2c 69 7d 76 61 72 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 63 2c 74 6f 53 74 72 69 6e 67 3a 64 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 64 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 26 26 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: t((()=>{throw l(i),i}))}function u(t){const i=h.apply(null,arguments);return i.expected=!0,i}var{hasOwnProperty:c,toString:d}=Object.prototype;function f(t){return"[object Object]"===d.call(t)}function p(t){const i=Object.create(null);return t&&Object.ass
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 69 6f 6e 20 56 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 64 65 78 4f 66 28 77 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 2c 69 2c 65 3d 22 41 73 73 65 72 74 69 6f 6e 20 66 61 69 6c 65 64 22 2c 73 29 7b 76 61 72 20 6e 2c 72 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 3b 74 26 26 2d 31 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 26 26 28 65 2b 3d 74 29 3b 6c 65 74 20 6f 3d 33 3b 63 6f 6e 73 74 20 68 3d 65 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 6c 65 74 20 6c 3d 68 2e 73 68 69 66 74 28 29 3b 63 6f 6e 73 74 20 61 3d 5b 6c 5d 3b 66 6f 72 28 3b 68 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 2b 2b 5d 2c 69 3d 68 2e 73 68 69 66 74 28 29 3b 6c 2b 3d 78 28 74 29 2b 69 2c 61 2e 70 75 73 68 28 74 2c 69 2e 74 72 69 6d Data Ascii: ion V(t){return t.indexOf(w)>=0}function S(t,i,e="Assertion failed",s){var n,r;if(i)return i;t&&-1==e.indexOf(t)&&(e+=t);let o=3;const h=e.split("%s");let l=h.shift();const a=[l];for(;h.length;){const t=arguments[o++],i=h.shift();l+=x(t)+i,a.push(t,i.trim
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 2f 5c 2b 2f 67 2c 22 20 22 29 2c 65 5b 32 5d 29 3a 22 22 3b 69 5b 74 5d 3d 73 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 29 7b 63 6f 6e 73 74 7b 6c 6f 63 61 74 69 6f 6e 3a 69 7d 3d 74 7c 7c 73 65 6c 66 3b 72 65 74 75 72 6e 20 57 28 69 2e 6f 72 69 67 69 6e 61 6c 48 61 73 68 7c 7c 69 2e 68 61 73 68 29 7d 76 61 72 20 59 3d 74 3d 3e 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 3f 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 5b 74 5d 3a 6e 75 6c 6c 2c 51 3d 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 3f 6e 65 77 20 52 65 67 45 78 70 28 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 29 3a 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 29 7c 7c 2f 5e 68 74 74 70 Data Ascii: /\+/g," "),e[2]):"";i[t]=s}return i}function K(t){const{location:i}=t\|\|self;return W(i.originalHash\|\|i.hash)}var Y=t=>self.AMP_CONFIG?self.AMP_CONFIG[t]:null,Q=("string"==typeof Y("cdnProxyRegex")?new RegExp(Y("cdnProxyRegex")):Y("cdnProxyRegex"))\|\|/^http
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 75 64 65 73 28 65 2e 64 65 76 65 6c 6f 70 6d 65 6e 74 29 7c 7c 21 21 74 2e 41 4d 50 5f 44 45 56 5f 4d 4f 44 45 7d 76 61 72 20 64 74 3d 28 29 3d 3e 7b 7d 2c 66 74 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 29 7b 66 74 3d 74 7d 76 61 72 20 6d 74 3d 28 74 2c 69 29 3d 3e 69 2e 72 65 64 75 63 65 28 28 28 74 2c 69 29 3d 3e 60 24 7b 74 7d 26 73 5b 5d 3d 24 7b 67 74 28 69 29 7d 60 29 2c 60 68 74 74 70 73 3a 2f 2f 6c 6f 67 2e 61 6d 70 2e 64 65 76 2f 3f 76 3d 30 31 32 34 30 35 31 30 31 36 35 32 30 30 30 26 69 64 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 60 29 2c 67 74 3d 74 3d 3e 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 78 28 74 29 29 29 2c 5f 74 3d 74 3d 3e 70 61 72 73 65 49 Data Ascii: udes(e.development)\|\|!!t.AMP_DEV_MODE}var dt=()=>{},ft=void 0;function pt(t){ft=t}var mt=(t,i)=>i.reduce(((t,i)=>`${t}&s[]=${gt(i)}`),`https://log.amp.dev/?v=012405101652000&id=${encodeURIComponent(t)}`),gt=t=>encodeURIComponent(String(x(t))),_t=t=>parseI
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 69 6f 6e 20 4e 74 28 74 2c 69 2c 65 29 7b 69 66 28 69 28 74 29 29 65 28 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 73 3d 6e 65 77 28 4d 74 28 74 29 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 28 28 28 29 3d 3e 7b 69 28 74 29 26 26 28 73 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 28 29 29 7d 29 29 3b 73 2e 6f 62 73 65 72 76 65 28 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 74 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 69 3d 3e 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 4e 74 28 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 28 28 29 3d 3e 21 21 74 2e 62 6f 64 79 29 2c 69 29 7d 28 74 2c 69 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 74 29 7b 76 61 72 20 69 3b 6e 75 6c Data Ascii: ion Nt(t,i,e){if(i(t))e();else{const s=new(Mt(t).MutationObserver)((()=>{i(t)&&(s.disconnect(),e())}));s.observe(t,{childList:!0})}}function Dt(t){return new Promise((i=>function(t,i){Nt(t.documentElement,(()=>!!t.body),i)}(t,i)))}function Ut(t){var i;nul
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 58 74 28 74 2c 69 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 69 26 26 30 3d 3d 65 7c 7c 30 3d 3d 74 2e 77 69 64 74 68 26 26 30 3d 3d 74 2e 68 65 69 67 68 74 3f 74 3a 59 74 28 74 2e 6c 65 66 74 2b 69 2c 74 2e 74 6f 70 2b 65 2c 74 2e 77 69 64 74 68 2c 74 2e 68 65 69 67 68 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 7c 7c 21 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 5f 73 74 75 62 7c 7c 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 28 29 Data Ascii: Xt(t,i,e){return 0==i&&0==e\|\|0==t.width&&0==t.height?t:Yt(t.left+i,t.top+e,t.width,t.height)}function Jt(t){return!t.IntersectionObserver\|\|!t.IntersectionObserverEntry\|\|!!t.IntersectionObserver._stub\|\|!function(t){try{return new t.IntersectionObserver((()
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 68 69 73 2e 46 3d 69 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 74 68 69 73 2e 4c 29 69 2e 6f 62 73 65 72 76 65 28 74 29 3b 74 68 69 73 2e 4c 2e 6c 65 6e 67 74 68 3d 30 7d 7d 3b 73 69 2e 5f 75 70 67 72 61 64 65 72 73 3d 5b 5d 2c 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 26 26 28 4a 74 28 65 69 3d 73 65 6c 66 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 72 65 74 75 72 6e 20 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 3d 5a 74 2c 76 6f 69 64 28 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 5f 73 74 75 62 3d 5a 74 29 3b 63 6f 6e 73 74 20 69 3d 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 3b 74 2e 49 6e 74 65 72 Data Ascii: his.F=i;for(const t of this.L)i.observe(t);this.L.length=0}};si._upgraders=[],self.document&&(Jt(ei=self)&&function(t){if(!t.IntersectionObserver)return t.IntersectionObserver=Zt,void(t.IntersectionObserver._stub=Zt);const i=t.IntersectionObserver;t.Inter
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 65 6c 65 6d 65 6e 74 22 2c 69 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 63 72 69 70 74 22 2c 69 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 69 6e 73 65 72 74 65 64 22 2c 22 22 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 6d 6f 64 75 6c 65 22 29 2c 4b 74 28 74 2e 64 6f 63 75 6d 65 6e 74 2c 73 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 73 29 7b 72 65 74 75 72 6e 60 24 7b 69 74 7d 2f 72 74 76 2f 24 7b 61 74 28 29 2e 72 74 76 56 65 72 73 69 6f 6e 7d 2f 76 30 2f 24 7b 69 7d 24 7b 65 3f 22 2d 22 2b 65 3a 22 Data Ascii: element",i),s.setAttribute("data-script",i),s.setAttribute("i-amphtml-inserted",""),s.setAttribute("type","module"),Kt(t.document,s),s.setAttribute("crossorigin","anonymous");const n=function(t,i,e,s){return`${it}/rtv/${at().rtvVersion}/v0/${i}${e?"-"+e:"
2024-05-21 09:22:18 UTC	1579	IN	Data Raw: 41 6d 70 44 6f 63 28 74 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 4d 69 28 74 29 7b 63 6f 6e 73 74 20 69 3d 52 69 28 74 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 53 69 6e 67 6c 65 44 6f 63 28 29 3f 69 2e 77 69 6e 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 77 69 28 74 2c 69 29 7b 54 74 28 43 69 28 74 2c 69 29 29 3b 63 6f 6e 73 74 20 65 3d 53 69 28 74 29 5b 69 5d 3b 72 65 74 75 72 6e 20 65 2e 6f 62 6a 7c 7c 28 54 74 28 65 2e 63 74 6f 72 29 2c 54 74 28 65 2e 63 6f 6e 74 65 78 74 29 2c 65 2e 6f 62 6a 3d 6e 65 77 20 65 2e 63 74 6f 72 28 65 2e 63 6f 6e 74 65 78 74 29 2c 54 74 28 65 2e 6f 62 6a 29 2c 65 2e 63 6f 6e 74 65 78 74 3d 6e 75 6c 6c 2c 65 2e 72 65 73 6f 6c 76 65 26 26 65 2e 72 65 73 6f 6c 76 65 28 65 2e 6f 62 6a 29 29 2c 65 2e 6f 62 6a 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: AmpDoc(t):t}function Mi(t){const i=Ri(t);return i.isSingleDoc()?i.win:i}function wi(t,i){Tt(Ci(t,i));const e=Si(t)[i];return e.obj\|\|(Tt(e.ctor),Tt(e.context),e.obj=new e.ctor(e.context),Tt(e.obj),e.context=null,e.resolve&&e.resolve(e.obj)),e.obj}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.9	51207	99.80.30.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	724	OUT	GET /pixel?gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D4%26spui%3D%26dpui%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:18 UTC	645	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 21 May 2024 09:22:18 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Location: https://ap.lijit.com/pixel?gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D4%26spui%3D%26dpui%3D%24UID&sovrn_retry=true Set-Cookie: ljt_reader=IsTyALZHNuVjvTOGTxWA7BW5;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.9	51231	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:18 UTC	924	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1666 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:18 UTC	1666	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 30 36 62 33 62 33 38 65 37 38 32 66 37 33 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 31 36 66 61 39 66 37 33 2d 39 62 35 39 2d 34 33 63 39 2d 38 65 66 39 2d 65 32 62 32 61 39 36 64 31 63 38 63 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 6d Data Ascii: {"Version":"1.0","Bids":{"106b3b38e782f73":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"16fa9f73-9b59-43c9-8ef9-e2b2a96d1c8c","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monum
2024-05-21 09:22:18 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:18 GMT content-length: 180 x-envoy-upstream-service-time: 90 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:18 UTC	180	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 36 34 31 62 35 37 34 65 62 63 35 38 37 65 32 37 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 36 34 31 62 35 37 34 65 62 63 35 38 37 65 32 37 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 31 30 36 62 33 62 33 38 65 37 38 32 66 37 33 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"641b574ebc587e274bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"641b574ebc587e274bfb0857db316efd","BidID":"106b3b38e782f73"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.9	51251	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	1028	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 1104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283309626:1716283309626
2024-05-21 09:22:19 UTC	1104	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 73 65 61 72 63 68 2d 61 72 74 69 63 6c 65 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 35 32 36 31 2d 32 32 39 36 2d 30 31 22 2c 22 63 6d 70 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 31 31 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 36 37 32 32 2c 22 74 74 66 62 22 3a 31 37 34 33 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 31 34 32 66 65 30 64 61 36 37 35 65 34 65 33 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 22 3a 22 31 36 66 Data Ascii: {"url":"https://custommapposter.com/search-article","publisherToken":"5261-2296-01","cmp":false,"timeout":1100,"version":"8.46.0","connectionType":"fixed","auctionStart":1716283336722,"ttfb":1743,"bidRequests":[{"id":"142fe0da675e4e3","transactionId":"16f
2024-05-21 09:22:19 UTC	1128	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 21 May 2024 09:22:19 GMT Content-Type: application/json; charset=utf-8 Content-Length: 11 Vary: X-HTTP-Method-Override Set-Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; Max-Age=31536000; Domain=.seedtag.com; Path=/; Expires=Wed, 21 May 2025 09:22:19 GMT; Secure; SameSite=None Set-Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; Max-Age=2592000; Domain=.seedtag.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:19 GMT; HttpOnly; Secure; SameSite=None Observe-Browsing-Topics: ?1 Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:19 UTC	11	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 7d Data Ascii: {"bids":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.9	51249	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	1940	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2597 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:19 UTC	2597	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 33 33 37 36 37 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 30 31 38 61 65 33 36 63 36 61 63 36 64 64 65 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 36 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 49 2e 46 23 72 65 70 Data Ascii: {"id":"1716283337672","at":1,"cur":["USD"],"imp":[{"id":"1018ae36c6ac6dde","tagid":"1433176","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDI.F#rep
2024-05-21 09:22:19 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:22:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.9	51252	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:19 UTC	1703	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 37 31 37 33 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283337173,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:19 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:19 GMT Content-Type: application/json Content-Length: 84 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 2 server: istio-envoy
2024-05-21 09:22:19 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 34 36 31 64 32 66 65 65 61 62 35 32 33 66 33 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"461d2feeab523f3","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.9	51253	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	736	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3664 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=10_1716283291_1716283338
2024-05-21 09:22:19 UTC	3664	OUT	Data Raw: 7b 22 61 22 3a 22 66 32 30 38 36 33 38 38 2d 39 30 37 34 2d 34 36 39 36 2d 39 31 35 30 2d 33 31 63 38 31 38 35 36 66 39 37 64 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"f2086388-9074-4696-9150-31c81856f97d","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:19 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1130 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:18 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=11_1716283291_1716283339; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:19 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close
2024-05-21 09:22:19 UTC	1130	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 59 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 5a 6a 49 77 4f 44 59 7a 4f 44 67 74 4f 54 41 33 4e 43 30 30 4e 6a 6b 32 4c 54 6b 78 4e 54 41 74 4d 7a 46 6a 4f Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqYCShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkZjIwODYzODgtOTA3NC00Njk2LTkxNTAtMzFjO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.9	51250	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	968	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1676 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:19 UTC	1676	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 30 37 35 65 35 65 63 65 32 64 63 38 39 63 64 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 38 36 33 62 37 61 61 38 2d 61 30 66 62 2d 34 64 30 34 2d 62 61 62 66 2d 61 32 62 36 38 37 65 34 35 35 33 36 22 2c 22 57 69 64 74 68 22 3a 31 36 30 2c 22 48 65 69 67 68 74 22 3a 36 30 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 31 36 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"1075e5ece2dc89cd":{"PlacementID":"210a38a5ef434f943203dcfa1a13deed","TransactionID":"863b7aa8-a0fb-4d04-babf-a2b687e45536","Width":160,"Height":600,"AvailableSizes":"160x600","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:22:19 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:19 GMT content-length: 181 x-envoy-upstream-service-time: 98 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:19 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 39 31 35 36 38 64 37 61 66 37 34 39 30 65 33 31 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 39 31 35 36 38 64 37 61 66 37 34 39 30 65 33 31 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 42 69 64 49 44 22 3a 22 31 30 37 35 65 35 65 63 65 32 64 63 38 39 63 64 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"91568d7af7490e31210a38a5ef434f94","Placement":"210a38a5ef434f943203dcfa1a13deed","CreativeID":"91568d7af7490e31210a38a5ef434f94","BidID":"1075e5ece2dc89cd"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.9	51261	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1683 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:19 UTC	1683	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 37 38 33 37 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283337837,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:19 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:19 GMT Content-Type: application/json Content-Length: 84 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:22:19 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 36 32 37 66 31 64 38 30 35 63 64 65 33 33 39 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"627f1d805cde339","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.9	51264	69.166.1.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	3604	OUT	GET /trinity.json?key_maker=%7B%22145282c710b80995%22%3A%224038e93c4d4c13bc38d7%7C728x90%7Cgpid%3D%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&s=7d2ce4ad-4093-454f-a27c-14342532770c&pv=53296ce7-fb97-4278-9d3f-061d9624f896&vp=desktop&lib_name=prebid&lib_v=8.46.0&us=3&iqid=%7B%22pcid%22%3A%220248b5aa-e6c9-4839-aaab-d0d2fd63d9d2%22%2C%22pcidDate%22%3A1716283289724%2C%22pid%22%3A%22NqpxteGZ8D%22%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%22tid%22%3A%22c2c2a659-393e-42b2-82ac-eee8f38bc487%22%7D%2C%22site%22%3A%7B%22domain%22%3A%22custommapposter.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22custommapposter.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0%22%2C%22id%22%3A%22fdd82422-8575-448e-84fe-fa092518ca2d%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A0%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(W [TRUNCATED] Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; receive-cookie-deprecation: 1; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; HAPLB8G=s85190\|Zkxnx
2024-05-21 09:22:19 UTC	760	IN	HTTP/1.1 200 OK date: Tue, 21 May 2024 09:22:19 GMT content-type: application/json content-length: 427 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:22:18 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxnz; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-05-21 09:22:19 UTC	427	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 31 34 35 32 38 32 63 37 31 30 62 38 30 39 39 35 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 35 33 32 39 36 63 65 37 2d 66 62 39 37 2d 34 32 37 38 2d 39 64 33 66 2d 30 36 31 64 39 36 32 34 66 38 39 36 22 2c 22 73 62 69 5f 70 78 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 62 77 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 Data Ascii: {"slots":{"145282c710b80995":{}},"sbi_dc":"iad-2-","pv":"53296ce7-fb97-4278-9d3f-061d9624f896","sbi_px":[{"code":"bw","url":"https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=","type":"image"},{"code":"td","url":"https://match.adsrvr.org/track/c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.9	51293	35.227.252.103	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	704	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2893 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:19 UTC	2893	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 23 74 6f 63 2d 30 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/article/top/926#toc-0","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US"
2024-05-21 09:22:19 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:22:19 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:19 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 31 61 39 66 64 34 66 36 2d 62 65 64 65 2d 34 61 64 39 2d 39 35 39 37 2d 61 66 31 61 31 63 30 39 36 34 35 37 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"1a9fd4f6-bede-4ad9-9597-af1a1c096457","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.9	51262	18.205.222.128	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	640	OUT	GET /hems/pubcid/?domain=custommapposter.com&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762 HTTP/1.1 Host: context.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:19 UTC	812	IN	HTTP/1.1 200 OK Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1716283339&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=FhLwZo8Ze5%2BVz%2BLTOjXIWOPFJHd%2BVPT9HKOZcaELbV0%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1716283339&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=FhLwZo8Ze5%2BVz%2BLTOjXIWOPFJHd%2BVPT9HKOZcaELbV0%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Access-Control-Allow-Origin: * Allow: OPTIONS, GET Content-Length: 2 Content-Type: application/json Date: Tue, 21 May 2024 09:22:19 GMT Server: waitress Vary: Accept, Origin, Cookie X-Content-Type-Options: nosniff X-Frame-Options: DENY Via: 1.1 vegur
2024-05-21 09:22:19 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.9	51277	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	1407	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283338030&to=240&id5Id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&id5IdLinkType=2&aun=mmt-7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377_1_1_ad&id5id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDH.C%23header-3&maxw=728&maxh=90&si=1105833&pi=3&bf=728x90&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:19 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:19 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 579 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:19 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:19 UTC	579	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.9	51288	142.250.185.129	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	859	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:19 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 21 May 2024 09:22:19 GMT Expires: Wed, 21 May 2025 09:22:19 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:19 UTC	683	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-05-21 09:22:19 UTC	1390	IN	Data Raw: 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 61 28 61 29 7d 3b 76 61 72 20 65 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 65 61 3f 61 3a 22 22 7d 3b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: urn t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(
2024-05-21 09:22:19 UTC	1390	IN	Data Raw: 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 3d 64 7c 7c 30 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6b 3d 5b 5d 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 6b 2e 70 75 73 68 28 70 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 71 61 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e Data Ascii: .split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(Strin
2024-05-21 09:22:19 UTC	1390	IN	Data Raw: 3b 28 7b 7d 29 5b 33 5d 3d 64 61 28 70 28 6e 65 77 20 6e 28 6c 2c 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 61 64 73 2f 72 69 63 68 6d 65 64 69 61 2f 73 74 75 64 69 6f 5f 63 61 6e 61 72 79 2f 6d 75 2f 74 65 6d 70 6c 61 74 65 73 2f 68 69 66 69 2f 68 69 66 69 5f 63 61 6e 61 72 79 2e 6a 73 22 29 29 29 3b 76 61 72 20 75 61 3d 2f 5e 28 5b 5e 3b 5d 2b 29 3b 28 5c 64 2b 29 3b 28 5b 5c 73 5c 53 5d 2a 29 24 2f 3b 76 61 72 20 76 61 3d 2f 5e 28 5b 61 2d 7a 30 2d 39 5d 28 5b 61 2d 7a 30 2d 39 2d 5d 7b 30 2c 36 31 7d 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 73 61 66 65 66 72 61 6d 65 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 74 70 63 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 73 65 63 75 Data Ascii: ;({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S]*)$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secu
2024-05-21 09:22:19 UTC	1309	IN	Data Raw: 74 22 2c 35 30 37 29 3b 76 2e 65 72 72 6f 72 26 26 76 2e 6d 65 74 61 26 26 76 2e 69 64 7c 7c 28 76 3d 6e 65 77 20 68 61 29 3b 69 66 28 76 2e 6d 73 67 29 7b 76 61 72 20 43 61 3d 76 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 49 2e 67 2e 70 75 73 68 28 32 29 3b 49 2e 68 5b 32 5d 3d 7a 28 22 6d 73 67 22 2c 43 61 29 7d 76 61 72 20 44 61 3d 5b 76 2e 6d 65 74 61 7c 7c 7b 7d 5d 3b 49 2e 67 2e 70 75 73 68 28 33 29 3b 49 2e 68 5b 33 5d 3d 44 61 3b 76 61 72 20 4a 3d 66 2c 4b 3d 5b 5d 2c 4c 2c 4d 3d 6e 75 6c 6c 2c 4e 3b 64 6f 7b 4e 3d 4a 3b 76 61 72 20 50 3b 74 72 79 7b 76 61 72 20 51 3b 69 66 28 51 3d 21 21 4e 26 26 6e 75 6c 6c 21 3d 4e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 77 28 4e 2e 66 6f 6f 29 3b 51 3d 21 30 3b Data Ascii: t",507);v.error&&v.meta&&v.id\|\|(v=new ha);if(v.msg){var Ca=v.msg.substring(0,512);I.g.push(2);I.h[2]=z("msg",Ca)}var Da=[v.meta\|\|{}];I.g.push(3);I.h[3]=Da;var J=f,K=[],L,M=null,N;do{N=J;var P;try{var Q;if(Q=!!N&&null!=N.location.href)b:{try{w(N.foo);Q=!0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.9	51342	216.58.206.65	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	564	OUT	GET /rtv/012405101652000/v0/amp-fit-text-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:20 UTC	1577	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 5164 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 20 May 2024 19:26:58 GMT Expires: Tue, 20 May 2025 19:26:58 GMT Cache-Control: public, max-age=31536000 ETag: "3fbc3dcbf96de901" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 50121 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:20 UTC	1577	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 35 31 30 31 36 35 32 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 66 69 74 2d 74 65 78 74 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 28 28 29 3d 3e 7b 76 61 72 20 6e 2c 7b 69 73 41 72 72 61 79 3a 69 7d 3d 41 72 72 61 79 2c 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 65 2c 74 6f 53 74 72 69 6e 67 3a 6f 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 69 3d 6e 29 26 26 69 73 46 69 6e 69 74 65 28 69 29 3f Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2405101652000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?
2024-05-21 09:22:20 UTC	1577	IN	Data Raw: 3d 74 7c 7c 22 66 6c 75 69 64 22 3d 3d 74 7c 7c 22 69 6e 74 72 69 6e 73 69 63 22 3d 3d 74 7d 28 74 29 7d 62 75 69 6c 64 43 61 6c 6c 62 61 63 6b 28 29 7b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 3a 74 7d 3d 74 68 69 73 2c 7b 63 6f 6e 74 65 6e 74 3a 6e 2c 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 3a 69 2c 6d 65 61 73 75 72 65 72 3a 65 7d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 73 73 72 22 29 7d 28 74 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 2e 24 7b 61 28 6d 29 7d 60 29 2c 69 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 Data Ascii: =t\|\|"fluid"==t\|\|"intrinsic"==t}(t)}buildCallback(){const{element:t}=this,{content:n,contentWrapper:i,measurer:e}=function(t){if(function(t){return t.hasAttribute("i-amphtml-ssr")}(t))return function(t){const n=t.querySelector(`.${a(m)}`),i=t.querySelector
2024-05-21 09:22:20 UTC	1577	IN	Data Raw: 2e 77 69 6e 2e 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 6c 65 74 20 65 3d 30 2c 6f 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 6f 3d 6e 75 6c 6c 2c 65 3d 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 73 2c 31 30 30 29 2c 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 65 3d 30 2c 6f 26 26 72 28 6f 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 74 29 7b 65 3f 6f 3d 74 3a 72 28 74 29 7d 7d 28 74 68 69 73 2e 77 69 6e 2c 28 28 29 3d 3e 74 68 69 73 2e 6d 75 74 61 74 65 45 6c 65 6d 65 6e 74 28 28 28 29 3d 3e 7b 74 68 69 73 2e 4c 74 74 28 29 2c 74 68 69 73 2e 6d 67 28 29 7d 29 29 29 29 29 3b 74 2e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 6d 58 29 2c Data Ascii: .win.ResizeObserver(function(t,n,i){let e=0,o=null;function r(i){o=null,e=t.setTimeout(s,100),n.apply(null,i)}function s(){e=0,o&&r(o)}return function(...t){e?o=t:r(t)}}(this.win,(()=>this.mutateElement((()=>{this.Ltt(),this.mg()})))));t.observe(this.mX),
2024-05-21 09:22:20 UTC	433	IN	Data Raw: 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 66 69 74 2d 74 65 78 74 2d 6d 65 61 73 75 72 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 5c 6e 2f 2a 23 20 73 6f Data Ascii: n{display:block;display:-webkit-box;-webkit-box-orient:vertical;overflow:hidden}.i-amphtml-fit-text-measurer{position:absolute!important;top:0!important;left:0!important;z-index:1!important;visibility:hidden!important;line-height:1.15em!important}\n/*# so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.9	51357	54.171.119.95	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1683 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:19 UTC	1683	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 33 38 34 32 38 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283338428,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:20 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:19 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 1 server: istio-envoy
2024-05-21 09:22:20 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 35 31 30 31 39 61 61 62 36 30 30 66 32 66 62 36 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"51019aab600f2fb6","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.9	51362	145.40.97.67	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:19 UTC	736	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 3653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=11_1716283291_1716283339
2024-05-21 09:22:19 UTC	3653	OUT	Data Raw: 7b 22 61 22 3a 22 35 34 65 65 65 38 62 63 2d 65 37 66 66 2d 34 62 64 61 2d 38 31 39 30 2d 32 61 64 34 36 37 35 30 37 38 33 61 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 33 56 7a 64 47 39 74 62 57 46 77 63 47 39 7a 64 47 56 79 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a Data Ascii: {"a":"54eee8bc-e7ff-4bda-8190-2ad46750783a","B":0,"b":"custommapposter.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.46.0","vg":"pbjs","i":"Y3VzdG9tbWFwcG9zdGVyLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":
2024-05-21 09:22:20 UTC	558	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, private, must-revalidate content-length: 1130 content-type: application/json; charset=utf-8 date: Tue, 21 May 2024 09:22:19 GMT server: envoy vary: origin, accept-encoding, Accept-Encoding set-cookie: __amc=12_1716283291_1716283339; path=/; domain=prebid.a-mo.net; expires=Wed, 21 May 2025 09:22:20 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 25 connection: close
2024-05-21 09:22:20 UTC	1130	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 71 59 43 53 68 4e 6a 64 58 4e 30 62 32 31 74 59 58 42 77 62 33 4e 30 5a 58 49 75 59 32 39 74 55 67 74 68 59 58 4d 74 5a 54 52 6d 4d 47 4d 31 4f 46 6f 49 63 47 4a 68 4d 53 34 7a 4c 6a 52 71 45 32 4e 31 63 33 52 76 62 57 31 68 63 48 42 76 63 33 52 6c 63 69 35 6a 62 32 33 36 41 51 59 34 4c 6a 51 32 4c 6a 44 6f 41 67 47 49 41 35 76 50 73 62 49 47 71 41 4d 30 36 67 4d 6b 4e 54 52 6c 5a 57 55 34 59 6d 4d 74 5a 54 64 6d 5a 69 30 30 59 6d 52 68 4c 54 67 78 4f 54 41 74 4d 6d 46 6b 4e Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CqYCShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkNTRlZWU4YmMtZTdmZi00YmRhLTgxOTAtMmFkN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.9	51397	99.80.73.249	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	1476	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283338327&to=240&id5Id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&id5IdLinkType=2&aun=mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad&id5id=ID5VJlUo0MN1IWBb9sCfyQ1JjyR59EO5Mkbjnp88zBHCDygNDVFF-zijuTGlP4Y0R8K&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDL.A%23incontent-1&maxw=300&maxh=250&si=1105835&pi=3&bf=300x250&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:20 UTC	480	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:20 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 580 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:20 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:20 UTC	580	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.9	51436	185.64.189.112	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	1940	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2752 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:20 UTC	2752	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 32 38 33 33 33 38 33 33 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 32 39 63 35 64 37 64 30 30 33 61 34 36 66 36 22 2c 22 74 61 67 69 64 22 3a 22 31 34 33 33 31 37 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 30 38 34 32 35 37 36 2c 32 33 30 37 38 32 35 38 36 30 33 2f 4b 4a 49 30 31 4d 2f 4b 4a 49 30 31 4d 2d 44 44 4c 2e 41 23 69 6e 63 Data Ascii: {"id":"1716283338337","at":1,"cur":["USD"],"imp":[{"id":"229c5d7d003a46f6","tagid":"1433179","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/20842576,23078258603/KJI01M/KJI01M-DDL.A"},"pbadslot":"/20842576,23078258603/KJI01M/KJI01M-DDL.A#inc
2024-05-21 09:22:20 UTC	233	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:22:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.9	51451	216.58.206.65	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	560	OUT	GET /rtv/012405101652000/v0/amp-form-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:20 UTC	1578	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 41185 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 20 May 2024 19:26:58 GMT Expires: Tue, 20 May 2025 19:26:58 GMT Cache-Control: public, max-age=31536000 ETag: "5142532377b4a63a" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 50122 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 35 31 30 31 36 35 32 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 66 6f 72 6d 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 28 28 29 3d 3e 7b 76 61 72 20 69 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 7d 76 61 72 20 73 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 69 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 74 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 69 7d 29 29 7d 7d 3b 66 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2405101652000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};f
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 75 73 68 28 64 29 29 7d 63 6f 6e 73 74 20 6f 3d 52 28 74 29 3b 69 66 28 6e 75 6c 6c 21 3d 6f 26 26 6f 2e 6e 61 6d 65 29 7b 63 6f 6e 73 74 7b 6e 61 6d 65 3a 74 2c 76 61 6c 75 65 3a 69 7d 3d 6f 3b 76 6f 69 64 20 30 3d 3d 3d 65 5b 74 5d 26 26 28 65 5b 74 5d 3d 5b 5d 29 2c 65 5b 74 5d 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 30 3d 3d 65 5b 74 5d 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 73 3a 69 7d 3d 74 2c 7b 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3a 65 7d 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 73 3d 72 28 69 29 2e 66 69 6c 74 65 72 28 67 29 Data Ascii: ush(d))}const o=R(t);if(null!=o&&o.name){const{name:t,value:i}=o;void 0===e[t]&&(e[t]=[]),e[t].push(i)}return Object.keys(e).forEach((t=>{0==e[t].length&&delete e[t]})),e}function R(t){const{elements:i}=t,{activeElement:e}=t.ownerDocument,s=r(i).filter(g)
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 28 7a 28 74 29 29 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 69 29 7b 63 6f 6e 73 74 20 65 3d 47 28 7a 28 74 29 29 3b 72 65 74 75 72 6e 20 57 28 65 2c 69 29 3f 71 28 65 2c 69 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 63 6f 6e 73 74 20 65 3d 42 28 74 2c 69 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 3b 63 6f 6e 73 74 20 6e 3d 4a 28 74 29 3b 72 65 74 75 72 6e 20 6e 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 73 2c 7b 70 72 6f 6d 69 73 65 3a 69 2c 72 65 6a 65 63 74 3a 65 2c 72 65 73 6f 6c 76 65 3a 6e 7d 3d 74 3b 72 65 74 75 72 6e 20 69 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 2c 7b 6f 62 6a 3a 6e 75 6c 6c 2c 70 72 6f Data Ascii: (z(t)),i)}function U(t,i){const e=G(z(t));return W(e,i)?q(e,i):null}function H(t,i){return function(t,i){const e=B(t,i);if(e)return e;const n=J(t);return n[i]=function(){const t=new s,{promise:i,reject:e,resolve:n}=t;return i.catch((()=>{})),{obj:null,pro
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 75 72 6e 20 59 7d 28 29 2c 75 3d 21 28 6e 75 6c 6c 3d 3d 73 7c 7c 21 73 2e 63 61 70 74 75 72 65 29 3b 72 65 74 75 72 6e 20 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 69 2c 6f 2c 63 3f 73 3a 75 29 2c 28 29 3d 3e 7b 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 69 2c 6f 2c 63 3f 73 3a 75 29 2c 72 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 2c 6f 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 74 2c 69 2c 65 2c 73 29 7b 63 6f 6e 73 74 20 6e 3d 7b 64 65 74 61 69 6c 3a 65 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6e 2c 73 29 2c 6e 65 77 20 74 2e 43 75 73 74 6f 6d 45 76 65 6e 74 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 74 2c 69 2c 65 2c 73 29 7b 72 65 74 75 72 Data Ascii: urn Y}(),u=!(null==s\|\|!s.capture);return n.addEventListener(i,o,c?s:u),()=>{null==n\|\|n.removeEventListener(i,o,c?s:u),r=null,n=null,o=null}}function st(t,i,e,s){const n={detail:e};return Object.assign(n,s),new t.CustomEvent(i,n)}function nt(t,i,e,s){retur
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 73 71 2e 61 70 70 65 6e 64 28 74 2c 69 29 7d 64 65 6c 65 74 65 28 74 29 7b 74 68 69 73 2e 73 71 2e 64 65 6c 65 74 65 28 74 29 7d 65 6e 74 72 69 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 71 2e 65 6e 74 72 69 65 73 28 29 7d 67 65 74 46 6f 72 6d 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 71 7d 7d 2c 66 74 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6c 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 73 75 70 65 72 28 74 29 2c 74 26 26 54 28 74 2e 65 6c 65 6d 65 6e 74 73 2c 28 74 3d 3e 7b 22 66 69 6c 65 22 3d 3d 74 2e 74 79 70 65 26 26 30 3d 3d 74 2e 66 69 6c 65 73 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 73 71 2e 64 65 6c 65 74 65 28 74 2e 6e 61 6d 65 29 2c 74 68 69 73 2e 73 71 2e 61 70 70 65 6e 64 28 74 2e 6e 61 6d 65 2c Data Ascii: sq.append(t,i)}delete(t){this.sq.delete(t)}entries(){return this.sq.entries()}getFormData(){return this.sq}},ft=class extends lt{constructor(t){super(t),t&&T(t.elements,(t=>{"file"==t.type&&0==t.files.length&&(this.sq.delete(t.name),this.sq.append(t.name,
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 3b 65 2e 68 65 61 64 65 72 73 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 22 6d 75 6c 74 69 70 61 72 74 2f 66 6f 72 6d 2d 64 61 74 61 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 65 2e 62 6f 64 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 69 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 74 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 74 2e 6e 65 78 74 28 29 29 69 2e 70 75 73 68 28 65 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 69 7d 28 74 2e 65 6e 74 72 69 65 73 28 29 29 7d 76 61 72 20 73 3b 72 65 74 75 72 6e 7b 69 6e 70 75 74 3a 74 2c 69 6e 69 74 3a 65 7d 7d 76 61 72 20 52 74 3d 5b 22 57 65 62 6b 69 74 22 2c 22 77 65 62 6b 69 74 22 2c 22 4d 6f 7a 22 2c 22 6d 6f 7a 22 2c 22 6d 73 22 2c 22 4f 22 2c 22 6f 22 5d 2c 67 74 3d 7b Data Ascii: ;e.headers["Content-Type"]="multipart/form-data;charset=utf-8",e.body=function(t){const i=[];for(let e=t.next();!e.done;e=t.next())i.push(e.value);return i}(t.entries())}var s;return{input:t,init:e}}var Rt=["Webkit","webkit","Moz","moz","ms","O","o"],gt={
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 67 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 69 3d 51 28 74 29 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 69 2e 6d 65 61 73 75 72 65 45 6c 65 6d 65 6e 74 28 28 28 29 3d 3e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 29 2c 72 74 28 74 2c 22 6d 6f 75 73 65 75 70 22 29 5d 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 73 3d 65 5b 30 5d 3b 6c 65 74 20 6e 3d 30 3b 72 65 74 75 72 6e 20 69 2e 6d 65 61 73 75 72 65 4d 75 74 61 74 65 45 6c 65 6d 65 6e 74 28 74 2c 28 28 29 3d 3e 7b 6e 3d 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 7d 29 2c 28 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 29 7b 69 21 3d 65 26 26 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 53 74 29 7d 28 74 2c 73 2c 6e 29 7d 29 29 7d 29 29 7d Data Ascii: gName&&function(t){const i=Q(t);Promise.all([i.measureElement((()=>t.scrollHeight)),rt(t,"mouseup")]).then((e=>{const s=e[0];let n=0;return i.measureMutateElement(t,(()=>{n=t.scrollHeight}),(()=>{!function(t,i,e){i!=e&&t.removeAttribute(St)}(t,s,n)}))}))}
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 74 2d 62 6f 78 22 3d 3d 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 78 2d 73 69 7a 69 6e 67 22 29 3f 2d 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 29 2c 31 30 29 2d 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 2c 31 30 29 3a 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 22 29 2c 31 30 29 2b 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 22 29 2c 31 30 29 7d 29 2c 28 28 29 3d 3e 6f 2e Data Ascii: t-box"==i.getPropertyValue("box-sizing")?-parseInt(i.getPropertyValue("padding-top"),10)-parseInt(i.getPropertyValue("padding-bottom"),10):parseInt(i.getPropertyValue("border-top-width"),10)+parseInt(i.getPropertyValue("border-bottom-width"),10)}),(()=>o.
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 3b 69 2e 69 64 3d 60 62 75 62 62 6c 65 2d 6d 65 73 73 61 67 65 2d 24 7b 74 2e 69 64 7d 60 2c 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 2e 6d 65 73 73 61 67 65 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 65 64 62 79 22 2c 69 2e 69 64 29 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 61 6c 65 72 74 22 29 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2c 77 74 28 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 Data Ascii: ;i.id=`bubble-message-${t.id}`,i.textContent=t.message,t.bubbleElement.setAttribute("aria-labeledby",i.id),t.bubbleElement.setAttribute("role","alert"),t.bubbleElement.setAttribute("aria-live","assertive"),t.bubbleElement.appendChild(i),wt(t.bubbleElement
2024-05-21 09:22:20 UTC	1578	IN	Data Raw: 74 68 69 73 2e 4c 72 3d 44 28 74 2e 77 69 6e 2c 22 76 73 79 6e 63 22 29 2c 74 68 69 73 2e 61 71 3d 6e 75 6c 6c 2c 74 68 69 73 2e 68 71 3d 22 22 2c 74 68 69 73 2e 5f 73 3d 21 31 2c 74 68 69 73 2e 6c 71 3d 74 2e 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 77 74 28 74 68 69 73 2e 6c 71 2c 21 31 29 2c 74 68 69 73 2e 6c 71 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 62 75 62 62 6c 65 22 29 2c 74 68 69 73 2e 6c 71 2e 5f 5f 42 55 42 42 4c 45 5f 4f 42 4a 3d 74 68 69 73 2c 74 2e 67 65 74 42 6f 64 79 28 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 6c 71 29 7d 69 73 41 63 74 69 76 65 4f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: this.Lr=D(t.win,"vsync"),this.aq=null,this.hq="",this._s=!1,this.lq=t.win.document.createElement("div"),wt(this.lq,!1),this.lq.classList.add("i-amphtml-validation-bubble"),this.lq.__BUBBLE_OBJ=this,t.getBody().appendChild(this.lq)}isActiveOn(t){return thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.9	51453	159.223.96.127	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	1380	OUT	GET /api/cookie?partnerId=appnexus&userId=6403784576581203868&gdpr=0&gdpr_consent=&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=FtL112rUvKzIEDSDSVAlFzkOJyA2IGYIKXdDLUl8diFhfFZFYUJ6GXl1dWQgURdiFSlYZWdyYHNXQ2dEeUtxdCExJgMWZkN%2BTit0JmRmHlBgEHgffXV8aidQRWIXfUp5dHMwJwZHMUJpVmtwImBxARczQC9NfXF1MHQCQ2ISKB9%2BJiBxaBBEYUF9SnF1cTEiB0NnF3wZL3xyZXQBR2RUZ1h%2FdnZiJgJLY0F6S3FxcWsnA0tkQipPfHBmf2YEQWETckJ5cSYxd1EWYxUuHnt1J2BzBxB3WmlMeyMhZnNREDEQfEgtcXFgfANBYUN6SihnaHFyB0czQnNPenN0ZSUDE2dBcx59ciVjcAtQCFppGSYwKidmCEJ5VCweOTdmaT8QGyYzHlhzIyU%2FN1dedxEvCjtnfnF0EF53ES8KOwYrPTdXHCFUcVhraWYmN2IAPAAqGTBnfnFmT153BS4JOiwrPWYIUGMSe058JHxqaVZHNkdmTXp8IX4hCksxW3lMcCYlZCZURG0Sf1hlZyc8KlwXNgIiFScMIHF%2BEERmQS5MfHFyNyFREG1EL058d3dlIgIUbVRnWCA2DTU2Ux8wVHEOOzAhLg%3D%3D
2024-05-21 09:22:20 UTC	575	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; Domain=.cootlogix.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:20 GMT; Secure; SameSite=None content-type: image/avif content-length: 43 date: Tue, 21 May 2024 09:22:20 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.9	51456	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	813	OUT	GET /usersync?ttt=3&src=2&cspi=0&cn=3&spui=&dpui=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: x.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:20 UTC	488	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://ads.pubmatic.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:20 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:20 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.9	51457	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	1168	OUT	GET /cs/cookiesync/pubmatic?channeluid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: s.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283309626:1716283309626
2024-05-21 09:22:20 UTC	793	IN	HTTP/1.1 204 No Content Server: openresty Date: Tue, 21 May 2024 09:22:20 GMT Set-Cookie: st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; Max-Age=31104000; Domain=.seedtag.com; Path=/; Expires=Fri, 16 May 2025 09:22:20 GMT; Secure; SameSite=None Set-Cookie: st_csd=1716283340902:1716283340902; Max-Age=31104000; Domain=.seedtag.com; Path=/; Expires=Fri, 16 May 2025 09:22:20 GMT; Secure; SameSite=None Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.9	51454	142.250.185.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	792	OUT	GET /ads/measurement/l?ebcid=ALh7CaQGAxVwddf04pIT62KhLd-g7eRqB9ps-wPd6BHpiJPGExfOkOp1XT42tlYZ-Z74X4dz3_Lmj_2-yZvnPXCtAMDDt4uT-A HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:21 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 21 May 2024 09:22:21 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.9	51452	216.58.206.65	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	565	OUT	GET /rtv/012405101652000/v0/amp-analytics-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:21 UTC	1578	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 96782 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 20 May 2024 19:26:58 GMT Expires: Tue, 20 May 2025 19:26:58 GMT Cache-Control: public, max-age=31536000 ETag: "e92040d23ff8ecb1" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 50123 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 35 31 30 31 36 35 32 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 61 6e 61 6c 79 74 69 63 73 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 28 28 29 3d 3e 7b 76 61 72 20 69 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 7d 76 61 72 20 65 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 69 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 74 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 69 7d 29 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2405101652000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i})
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 69 2c 73 29 7b 63 6f 6e 73 74 20 65 3d 69 7c 7c 28 74 3d 3e 74 29 2c 7b 64 61 74 61 73 65 74 3a 6e 7d 3d 74 2c 72 3d 7b 7d 2c 6f 3d 73 7c 7c 2f 5e 70 61 72 61 6d 28 2e 2b 29 2f 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 6d 61 74 63 68 28 6f 29 3b 69 26 26 28 72 5b 65 28 69 5b 31 5d 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 5b 31 5d 2e 73 75 62 73 74 72 28 31 29 29 5d 3d 6e 5b 74 5d 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 72 65 6e 74 26 26 74 2e 70 61 72 65 6e 74 21 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 Data Ascii: function I(t,i,s){const e=i\|\|(t=>t),{dataset:n}=t,r={},o=s\|\|/^param(.+)/;for(const t in n){const i=t.match(o);i&&(r[e(i[1][0].toLowerCase()+i[1].substr(1))]=n[t])}return r}function v(t){return t.parent&&t.parent!=t}function R(t){const i=Object.getOwnPrope
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 7d 3b 76 61 72 20 78 3d 73 65 6c 66 2e 5f 5f 41 4d 50 5f 4c 4f 47 3b 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 69 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 66 61 69 6c 65 64 20 74 6f 20 63 61 6c 6c 20 69 6e 69 74 4c 6f 67 43 6f 6e 73 74 72 75 63 74 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 78 2e 75 73 65 72 7c 7c 28 78 2e 75 73 65 72 3d 6a 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 26 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 21 3d 74 7d 28 78 2e 75 73 65 72 2e 77 69 6e 2c 74 29 3f 78 2e 75 73 65 72 46 6f 72 45 6d 62 65 64 7c 7c 28 78 2e 75 73 65 72 46 6f 72 45 6d 62 65 64 3d 6a 28 29 29 3a 78 2e 75 73 65 72 7d 66 75 6e 63 74 69 6f Data Ascii: };var x=self.__AMP_LOG;function U(t,i){throw new Error("failed to call initLogConstructor")}function H(t){return x.user\|\|(x.user=j()),function(t,i){return i&&i.ownerDocument.defaultView!=t}(x.user.win,t)?x.userForEmbed\|\|(x.userForEmbed=j()):x.user}functio
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 69 74 28 74 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 73 74 28 74 29 5b 69 5d 3b 72 65 74 75 72 6e 20 73 3f 73 2e 70 72 6f 6d 69 73 65 3f 73 2e 70 72 6f 6d 69 73 65 3a 28 51 28 74 2c 69 29 2c 73 2e 70 72 6f 6d 69 73 65 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 2e 6f 62 6a 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 74 29 7b 6c 65 74 20 69 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 3b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 3d 7b 7d 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 26 26 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 5b 69 5d 3b 72 65 74 75 72 6e 21 28 21 Data Ascii: unction it(t,i){const s=st(t)[i];return s?s.promise?s.promise:(Q(t,i),s.promise=Promise.resolve(s.obj)):null}function st(t){let i=t.__AMP_SERVICES;return i\|\|(i=t.__AMP_SERVICES={}),i}function et(t,i){const s=t.__AMP_SERVICES&&t.__AMP_SERVICES[i];return!(!
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 75 70 22 5d 2c 52 74 3d 5b 22 6d 6f 75 73 65 6c 65 61 76 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 4d 74 28 74 2c 69 2c 73 29 7b 72 65 74 75 72 6e 20 69 20 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2c 7b 76 61 6c 75 65 3a 73 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 69 5d 3d 73 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 62 74 28 74 2c 69 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: keydown","keyup"],Rt=["mouseleave"];function Mt(t,i,s){return i in t?Object.defineProperty(t,i,{value:s,enumerable:!0,configurable:!0,writable:!0}):t[i]=s,t}function bt(t,i){var s=Object.keys(t);if(Object.getOwnPropertySymbols){var e=Object.getOwnProperty
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 61 79 6f 75 74 53 68 69 66 74 22 3a 22 43 55 4d 55 4c 41 54 49 56 45 5f 4c 41 59 4f 55 54 5f 53 48 49 46 54 22 2c 22 64 6f 63 75 6d 65 6e 74 43 68 61 72 73 65 74 22 3a 22 44 4f 43 55 4d 45 4e 54 5f 43 48 41 52 53 45 54 22 2c 22 64 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 22 3a 22 44 4f 43 55 4d 45 4e 54 5f 52 45 46 45 52 52 45 52 22 2c 22 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 54 69 6d 65 22 3a 22 44 4f 4d 5f 49 4e 54 45 52 41 43 54 49 56 45 5f 54 49 4d 45 22 2c 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 54 69 6d 65 22 3a 22 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 54 49 4d 45 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 42 72 61 6e 63 68 65 73 22 3a 22 45 58 50 45 52 49 4d 45 4e 54 5f 42 52 41 4e 43 48 45 53 22 2c 22 65 78 74 65 72 6e 61 6c 52 65 66 65 72 Data Ascii: ayoutShift":"CUMULATIVE_LAYOUT_SHIFT","documentCharset":"DOCUMENT_CHARSET","documentReferrer":"DOCUMENT_REFERRER","domInteractiveTime":"DOM_INTERACTIVE_TIME","domainLookupTime":"DOMAIN_LOOKUP_TIME","experimentBranches":"EXPERIMENT_BRANCHES","externalRefer
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 74 69 6d 65 73 74 61 6d 70 22 3a 22 54 49 4d 45 53 54 41 4d 50 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 54 49 4d 45 5a 4f 4e 45 22 2c 22 74 69 6d 65 7a 6f 6e 65 43 6f 64 65 22 3a 22 54 49 4d 45 5a 4f 4e 45 5f 43 4f 44 45 22 2c 22 74 69 74 6c 65 22 3a 22 54 49 54 4c 45 22 2c 22 74 6f 74 61 6c 45 6e 67 61 67 65 64 54 69 6d 65 22 3a 22 54 4f 54 41 4c 5f 45 4e 47 41 47 45 44 5f 54 49 4d 45 22 2c 22 75 61 63 68 22 3a 22 55 41 43 48 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 55 53 45 52 5f 41 47 45 4e 54 22 2c 22 76 69 65 77 65 72 22 3a 22 56 49 45 57 45 52 22 2c 22 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 22 3a 22 56 49 45 57 50 4f 52 54 5f 48 45 49 47 48 54 22 2c 22 76 69 65 77 70 6f 72 74 57 69 64 74 68 22 3a 22 56 49 45 57 50 4f 52 54 5f 57 49 44 54 48 Data Ascii: timestamp":"TIMESTAMP","timezone":"TIMEZONE","timezoneCode":"TIMEZONE_CODE","title":"TITLE","totalEngagedTime":"TOTAL_ENGAGED_TIME","uach":"UACH","userAgent":"USER_AGENT","viewer":"VIEWER","viewportHeight":"VIEWPORT_HEIGHT","viewportWidth":"VIEWPORT_WIDTH
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 2e 68 6f 73 74 6e 61 6d 65 2c 22 2e 6c 6f 63 61 6c 68 6f 73 74 22 29 7c 7c 2f 5e 5c 2f 5c 2f 2f 2e 74 65 73 74 28 74 29 2c 27 25 73 20 25 73 20 6d 75 73 74 20 73 74 61 72 74 20 77 69 74 68 20 22 68 74 74 70 73 3a 2f 2f 22 20 6f 72 20 22 2f 2f 22 20 6f 72 20 62 65 20 72 65 6c 61 74 69 76 65 20 61 6e 64 20 73 65 72 76 65 64 20 66 72 6f 6d 20 65 69 74 68 65 72 20 68 74 74 70 73 20 6f 72 20 66 72 6f 6d 20 6c 6f 63 61 6c 68 6f 73 74 2e 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 3a 20 25 73 27 2c 69 2c 73 2c 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 47 74 28 74 29 7b 72 65 74 75 72 6e 20 78 74 2e 63 64 6e 50 72 6f 78 79 52 65 67 65 78 2e 74 65 73 74 28 48 74 28 74 29 2e 6f 72 69 67 69 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 74 2c 69 29 7b 69 66 28 21 74 7c Data Ascii: .hostname,".localhost")\|\|/^\/\//.test(t),'%s %s must start with "https://" or "//" or be relative and served from either https or from localhost. Invalid value: %s',i,s,t),t}function Gt(t){return xt.cdnProxyRegex.test(Ht(t).origin)}function Wt(t,i){if(!t\|
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 75 72 6e 20 51 74 28 74 2c 65 2c 22 64 65 6c 65 74 65 22 2c 44 61 74 65 2e 6e 6f 77 28 29 2d 31 65 33 2c 73 29 2c 73 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 74 2c 69 2c 73 2c 65 2c 6e 2c 72 2c 6f 29 7b 22 61 6d 70 70 72 6f 6a 65 63 74 2e 6f 72 67 22 3d 3d 6e 26 26 28 73 3d 22 64 65 6c 65 74 65 22 2c 65 3d 30 29 3b 63 6f 6e 73 74 20 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 69 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 29 2b 22 3b 20 70 61 74 68 3d 2f 22 2b 28 6e 3f 22 3b 20 64 6f 6d 61 69 6e 3d 22 2b 6e 3a 22 22 29 2b 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 65 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: urn Qt(t,e,"delete",Date.now()-1e3,s),s}return null}function Qt(t,i,s,e,n,r,o){"ampproject.org"==n&&(s="delete",e=0);const h=encodeURIComponent(i)+"="+encodeURIComponent(s)+"; path=/"+(n?"; domain="+n:"")+"; expires="+new Date(e).toUTCString()+function(t,
2024-05-21 09:22:21 UTC	1578	IN	Data Raw: 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 74 2e 73 70 6c 69 63 65 28 73 2c 31 29 3b 63 6f 6e 73 74 7b 65 76 65 6e 74 73 3a 6e 7d 3d 65 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 6e 5b 74 5d 2e 73 70 6c 69 63 65 28 30 2c 31 2f 30 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 28 69 29 7d 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 69 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 69 3f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 6d 70 2d 33 70 2d 73 65 6e 74 69 6e 65 6c 22 29 3a 22 61 6d 70 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 41 4d 50 5f 45 4d 42 45 44 5f 5f 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 Data Ascii: e.contentWindow){t.splice(s,1);const{events:n}=e;for(const t in n)n[t].splice(0,1/0).forEach((t=>{t(i)}))}}}function ai(t,i){return i?t.getAttribute("data-amp-3p-sentinel"):"amp"}function li(t){return t.__AMP_EMBED__}function fi(t){return t.classList.cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.9	51459	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	1070	OUT	GET /se/hb/timeout?publisherToken=5261-2296-01&adUnitId=32073708&timeout=1100 HTTP/1.1 Host: s.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283309626:1716283309626
2024-05-21 09:22:20 UTC	419	IN	HTTP/1.1 204 No Content Server: openresty Date: Tue, 21 May 2024 09:22:20 GMT Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.9	51461	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	723	OUT	GET /usersync?gpp=&gpp_sid=&ttt=1&src=2&cspi=0&cn=5528&spui=&dpui=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1 Host: x.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:21 UTC	527	IN	HTTP/1.1 200 OK access-control-allow-origin: https://sync.serverbid.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: image/gif content-length: 35 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:21 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:20 GMT connection: close
2024-05-21 09:22:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.9	51455	99.80.30.120	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:20 UTC	786	OUT	GET /pixel?gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D4%26spui%3D%26dpui%3D%24UID&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IsTyALZHNuVjvTOGTxWA7BW5
2024-05-21 09:22:21 UTC	549	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 21 May 2024 09:22:21 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Location: https://x.serverbid.com/usersync?ttt=1&src=2&cspi=0&cn=4&spui=&dpui=IsTyALZHNuVjvTOGTxWA7BW5 Set-Cookie: ljt_reader=IsTyALZHNuVjvTOGTxWA7BW5;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.9	51458	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:21 UTC	642	OUT	GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1 HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:22:21 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Tue, 21 May 2024 09:22:21 GMT set-cookie: csuuid=664c679d515d1; expires=Sat, 15-Jun-2024 09:22:21 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-origin: * cache-control: no-store pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 b4904c5988fd0eaae341a12cc47f3766.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: eSgg4geGlQvuWU8EIWulz0VQvyKxqOWf5ICVa1UzQR6tsndwHmAUDQ== Age: 0
2024-05-21 09:22:21 UTC	14787	IN	Data Raw: 33 39 62 62 0d 0a 09 09 09 2f 2f 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 76 61 72 20 53 65 6b 69 6e 64 6f 43 6c 69 65 6e 74 44 79 6e 61 6d 69 63 43 6f 6e 66 69 67 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 66 69 67 2c 20 70 72 6f 62 29 0a 7b 0a 09 74 68 69 73 2e 4d 4f 42 49 4c 45 5f 4d 41 58 5f 57 49 44 54 48 20 3d 20 34 31 35 3b 0a 09 74 68 69 73 2e 63 6f 6e 66 69 67 20 3d 20 63 6f 6e 66 69 67 3b 0a 09 74 68 69 73 2e 70 72 6f 62 20 3d 20 70 72 6f 62 3b 0a 0a 09 76 61 72 20 72 65 66 20 3d 20 74 68 69 73 3b 0a 0a 09 74 68 69 73 2e 73 69 7a 65 53 65 74 75 70 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 75 6c 65 73 29 0a 09 7b 0a 09 09 Data Ascii: 39bb// <script type="text/javascript">(function () {var SekindoClientDynamicConfig = function (config, prob){this.MOBILE_MAX_WIDTH = 415;this.config = config;this.prob = prob;var ref = this;this.sizeSetup = function(rules){
2024-05-21 09:22:21 UTC	11600	IN	Data Raw: 32 64 34 38 0d 0a 65 72 44 69 76 53 65 74 75 70 20 63 6f 6e 66 69 67 22 29 3b 0a 09 09 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 6c 61 79 65 72 44 69 76 53 65 74 75 70 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 76 61 72 20 73 70 65 63 69 61 6c 45 6c 6d 74 20 3d 20 74 68 69 73 2e 5f 67 65 74 50 6c 61 79 65 72 4d 61 69 6e 45 6c 65 6d 65 6e 74 28 77 69 6e 64 6f 77 2e 74 6f 70 29 3b 0a 09 09 09 09 69 66 20 28 73 70 65 63 69 61 6c 45 6c 6d 74 20 26 26 20 74 79 70 65 6f 66 20 73 70 65 63 69 61 6c 45 6c 6d 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 0a 09 09 09 09 7b 0a 09 09 09 09 09 74 68 69 73 2e 73 72 63 45 6c 65 6d 65 6e 74 20 3d 20 73 70 65 63 69 61 6c 45 6c 6d 74 3b 0a 09 09 09 09 09 69 66 20 28 74 68 69 73 Data Ascii: 2d48erDivSetup config");console.log(this.config.playerDivSetup);}var specialElmt = this._getPlayerMainElement(window.top);if (specialElmt && typeof specialElmt !== 'undefined'){this.srcElement = specialElmt;if (this
2024-05-21 09:22:21 UTC	16328	IN	Data Raw: 33 66 63 30 0d 0a 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3b 0a 09 7d 0a 0a 09 74 68 69 73 2e 70 72 6f 63 65 73 73 20 3d 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 0a 09 7b 0a 09 09 69 66 20 28 21 74 68 69 73 2e 69 73 52 75 6e 29 0a 09 09 09 72 65 74 75 72 6e 3b 0a 0a 09 09 69 66 20 28 74 68 69 73 2e 69 73 45 6e 61 62 6c 65 47 44 50 52 4c 69 73 74 65 6e 65 72 20 26 26 20 74 68 69 73 2e 69 73 50 72 6f 63 65 73 73 46 69 72 73 74 52 75 6e 29 20 7b 0a 09 09 09 76 61 72 20 72 65 66 20 3d 20 74 68 69 73 3b 0a 09 09 09 74 72 79 20 7b 0a 09 09 09 09 61 77 61 69 74 20 72 65 66 2e 67 64 70 72 43 6f 6e 73 65 6e 74 43 68 65 63 6b 28 29 3b 0a 09 09 09 7d 20 63 61 74 63 68 20 28 65 29 20 7b 7d 3b 0a 09 09 7d 0a 0a 09 09 69 Data Ascii: 3fc0}return containerInfo;}this.process = async function(){if (!this.isRun)return;if (this.isEnableGDPRListener && this.isProcessFirstRun) {var ref = this;try {await ref.gdprConsentCheck();} catch (e) {};}i
2024-05-21 09:22:21 UTC	7878	IN	Data Raw: 31 65 62 65 0d 0a 49 6e 66 6f 2e 68 61 73 53 63 72 6f 6c 6c 65 64 29 3b 0a 09 09 09 7d 0a 09 09 09 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 56 65 72 74 69 63 61 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 63 75 72 72 65 6e 74 56 69 65 77 65 64 50 65 72 63 65 6e 74 61 67 65 3b 0a 09 09 09 69 66 20 28 28 72 65 66 2e 6f 62 73 65 72 76 65 64 45 6c 65 6d 65 6e 74 49 6e 66 6f 2e 69 73 56 69 65 77 61 62 6c 65 20 26 26 20 72 65 66 2e 61 6c 6c 6f 77 56 69 65 77 61 62 69 6c 69 74 79 43 68 65 63 6b 29 20 7c 7c 20 28 72 65 66 2e 6f 62 73 65 72 76 65 64 45 6c 65 6d 65 6e 74 49 6e 66 6f 2e 68 61 73 53 63 72 6f 6c 6c 65 64 20 26 26 20 72 65 66 2e 61 6c 6c 6f 77 55 73 65 72 53 63 72 6f 6c 6c 43 68 65 63 6b 29 29 0a 09 09 09 7b 0a 09 09 09 09 72 65 66 2e 65 6c 65 6d 65 6e 74 43 68 Data Ascii: 1ebeInfo.hasScrolled);}currentScrollVerticalPosition = currentViewedPercentage;if ((ref.observedElementInfo.isViewable && ref.allowViewabilityCheck) \|\| (ref.observedElementInfo.hasScrolled && ref.allowUserScrollCheck)){ref.elementCh
2024-05-21 09:22:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.9	51462	52.94.223.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:21 UTC	855	OUT	GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:21 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:21 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 347 Connection: close x-amz-rid: 3DBZXARBDPJY4WMDZE0B Set-Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 09:22:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 09:22:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:21 UTC	347	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 67 67 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 73 6d 72 74 5f 6e 2d 61 64 59 6f 75 4c 69 6b 65 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 26 66 76 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//aax-eu.amazon-adsystem.com/s/v3/pr?exlist=gg_n-minuteMedia_rbd_rx_n-baidu_n-Beeswax_smrt_n-adYouLike_3lift_n-Outbrain&fv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.9	51467	35.214.168.80	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:21 UTC	647	OUT	GET /ju/cs/amazon?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID HTTP/1.1 Host: trace-eu.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:21 UTC	571	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=baidu.com&id=22210ca72884d990241bti00lwg6sdrn Set-Cookie: __mguid_=22210ca72884d990241bti00lwg6sdrn; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Tue, 21 May 2024 09:22:21 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:21 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.9	51463	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:21 UTC	848	OUT	GET /usersync3/pubmatic/2069.5/9C64CA21-50AD-44D1-9AA7-4F2BA46D171B?zcc=0&sspret=1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222069.5%22%7D
2024-05-21 09:22:21 UTC	707	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:21 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%7D; path=/; expires=Wed, 21 May 2025 09:22:21 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3DRX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%26ex%3Drhythmone.com connection: close
2024-05-21 09:22:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.9	51487	142.250.185.65	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:21 UTC	859	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 1261c6478a9a9c0ed2fa7ce6d52becf9.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:22 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 21 May 2024 09:22:21 GMT Expires: Wed, 21 May 2025 09:22:21 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:22 UTC	683	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-05-21 09:22:22 UTC	1390	IN	Data Raw: 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 61 28 61 29 7d 3b 76 61 72 20 65 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 65 61 3f 61 3a 22 22 7d 3b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: urn t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(
2024-05-21 09:22:22 UTC	1390	IN	Data Raw: 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 3d 64 7c 7c 30 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6b 3d 5b 5d 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 6b 2e 70 75 73 68 28 70 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 71 61 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e Data Ascii: .split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(Strin
2024-05-21 09:22:22 UTC	1390	IN	Data Raw: 3b 28 7b 7d 29 5b 33 5d 3d 64 61 28 70 28 6e 65 77 20 6e 28 6c 2c 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 61 64 73 2f 72 69 63 68 6d 65 64 69 61 2f 73 74 75 64 69 6f 5f 63 61 6e 61 72 79 2f 6d 75 2f 74 65 6d 70 6c 61 74 65 73 2f 68 69 66 69 2f 68 69 66 69 5f 63 61 6e 61 72 79 2e 6a 73 22 29 29 29 3b 76 61 72 20 75 61 3d 2f 5e 28 5b 5e 3b 5d 2b 29 3b 28 5c 64 2b 29 3b 28 5b 5c 73 5c 53 5d 2a 29 24 2f 3b 76 61 72 20 76 61 3d 2f 5e 28 5b 61 2d 7a 30 2d 39 5d 28 5b 61 2d 7a 30 2d 39 2d 5d 7b 30 2c 36 31 7d 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 73 61 66 65 66 72 61 6d 65 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 74 70 63 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 73 65 63 75 Data Ascii: ;({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S]*)$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secu
2024-05-21 09:22:22 UTC	1309	IN	Data Raw: 74 22 2c 35 30 37 29 3b 76 2e 65 72 72 6f 72 26 26 76 2e 6d 65 74 61 26 26 76 2e 69 64 7c 7c 28 76 3d 6e 65 77 20 68 61 29 3b 69 66 28 76 2e 6d 73 67 29 7b 76 61 72 20 43 61 3d 76 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 49 2e 67 2e 70 75 73 68 28 32 29 3b 49 2e 68 5b 32 5d 3d 7a 28 22 6d 73 67 22 2c 43 61 29 7d 76 61 72 20 44 61 3d 5b 76 2e 6d 65 74 61 7c 7c 7b 7d 5d 3b 49 2e 67 2e 70 75 73 68 28 33 29 3b 49 2e 68 5b 33 5d 3d 44 61 3b 76 61 72 20 4a 3d 66 2c 4b 3d 5b 5d 2c 4c 2c 4d 3d 6e 75 6c 6c 2c 4e 3b 64 6f 7b 4e 3d 4a 3b 76 61 72 20 50 3b 74 72 79 7b 76 61 72 20 51 3b 69 66 28 51 3d 21 21 4e 26 26 6e 75 6c 6c 21 3d 4e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 77 28 4e 2e 66 6f 6f 29 3b 51 3d 21 30 3b Data Ascii: t",507);v.error&&v.meta&&v.id\|\|(v=new ha);if(v.msg){var Ca=v.msg.substring(0,512);I.g.push(2);I.h[2]=z("msg",Ca)}var Da=[v.meta\|\|{}];I.g.push(3);I.h[3]=Da;var J=f,K=[],L,M=null,N;do{N=J;var P;try{var Q;if(Q=!!N&&null!=N.location.href)b:{try{w(N.foo);Q=!0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.9	51493	172.217.16.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:22 UTC	645	OUT	GET /i/20842576?ers=3 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:22 UTC	1967	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 21 May 2024 09:22:22 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Z03mhtnSL9Vs7f0Xq-16Eg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjKtDikmJw1pBiOHnrNtNFID7vdIfpOhAbaDxnsgBiia8vmbSAOOb5dNYUIHZKn8EaAsQ-9TNY44C49eY51ulAnPTvPGsJEO9cfIH1IBCvOnKBdRMQt3--wDoTiL-xX2T9B8RCPBznzm_cxCZw4_O76YxKGkn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUXxRgZGJgamhpZ6BubxBQYA0y5JOg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 37 32 61 33 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 72a3if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 Data Ascii: eturn a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.q=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Err
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 43 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 55 28 29 3b 74 68 69 73 2e 46 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 55 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 4a 28 29 29 7b 76 61 72 20 68 3d 5f 2e 65 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 68 2e 65 72 72 6f 72 28 67 2e 6a 29 7d 7d 2c 31 29 7d 3b 65 2e Data Ascii: ,g)};e.prototype.C=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`"+this.g);this.g=g;this.j=h;2===this.g&&this.U();this.F()};e.prototype.U=function(){var g=this;d(function(){if(g.J()){var h=_.ea.console;"undefined"!==typeof h&&h.error(g.j)}},1)};e.
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 70 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 67 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 29 3b 0a 76 61 72 20 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c Data Ascii: ction(a){return a?a:function(b,c){var d=pa(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var g=0;g<f&&c<e;)if(d[c++]!=b[g++])return!1;return g>=f}});var qa=function(a,b){return Object.prototype.hasOwnProperty.call(a,
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 22 73 22 21 3d 6e 2e 76 61 6c 75 65 5b 31 5d 29 72 65 74 75 72 6e 21 31 3b 6e 3d 6c 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 2e 64 6f 6e 65 7c 7c 34 21 3d 6e 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 22 74 22 21 3d 6e 2e 76 61 6c 75 65 5b 31 5d 7c 7c 21 6c 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 Data Ascii: "]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next();if(n.done\|\|n.value[0]!=h\|\|"s"!=n.value[1])return!1;n=l.next();return n.done\|\|4!=n.value[0].x\|\|"t"!=n.value[1]\|\|!l.next().done?!1:!0}catch
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 26 26 2d 49 6e 66 69 6e 69 74 79 21 3d 3d 62 7d 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 49 6e 74 65 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 Data Ascii: ,g=0;return c});p("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991});p("Number.isFinite",function(a){return a?a:function(b){return"number"!==typeof b?!1:!isNaN(b)&&Infinity!==b&&-Infinity!==b}});p("Number.isInteger",function(a){return a?a:func
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 0a 70 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 7c 7c 30 3b 30 3e 63 26 26 28 Data Ascii: unction"==typeof f){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Array.prototype.fill",function(a){return a?a:function(b,c,d){var e=this.length\|\|0;0>c&&(
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 71 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 70 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 65 61 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 70 61 28 74 68 69 73 2c 6e 75 6c 6c 2c 22 72 65 70 65 61 74 22 29 3b 69 66 28 30 3e 62 7c 7c 31 33 34 32 31 37 37 32 37 39 3c 62 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 6f 22 29 3b 62 7c 3d 30 3b 66 6f 72 28 76 61 72 20 64 3d 22 22 3b 62 3b 29 69 66 28 62 26 31 26 26 28 64 2b 3d 63 29 2c 62 3e 3e 3e 3d 31 29 63 2b 3d Data Ascii: nction(b){var c=[],d;for(d in b)qa(b,d)&&c.push([d,b[d]]);return c}});p("String.prototype.repeat",function(a){return a?a:function(b){var c=pa(this,null,"repeat");if(0>b\|\|1342177279<b)throw new RangeError("o");b\|=0;for(var d="";b;)if(b&1&&(d+=c),b>>>=1)c+=
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 2c 62 29 7b 28 30 2c 5f 2e 4f 61 29 28 62 2c 28 61 7c 30 29 26 2d 31 34 35 39 31 29 7d 3b 52 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 30 2c 5f 2e 4f 61 29 28 62 2c 28 61 7c 33 34 29 26 2d 31 34 35 35 37 29 7d 3b 53 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 3e 3e 31 34 26 31 30 32 33 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 35 33 36 38 37 30 39 31 32 3a 61 7d 3b 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 67 21 3d 3d 54 61 29 7d 3b 0a 5f 2e 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 Data Ascii: ,b){(0,_.Oa)(b,(a\|0)&-14591)};Ra=function(a,b){(0,_.Oa)(b,(a\|34)&-14557)};Sa=function(a){a=a>>14&1023;return 0===a?536870912:a};Ua=function(a){return!(!a\|\|"object"!==typeof a\|\|a.g!==Ta)};_.Va=function(a){return null!==a&&"object"===typeof a&&!Array.isArr
2024-05-21 09:22:22 UTC	1967	IN	Data Raw: 36 37 36 30 38 33 33 7c 28 62 26 31 30 32 33 29 3c 3c 31 34 7d 7d 7d 28 30 2c 5f 2e 4f 61 29 28 61 2c 0a 64 29 3b 72 65 74 75 72 6e 20 61 7d 3b 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 62 28 62 29 7d 3b 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 5f 2e 59 61 28 61 2c 76 6f 69 64 20 30 2c 30 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 Data Ascii: 6760833\|(b&1023)<<14}}}(0,_.Oa)(a,d);return a};sb=function(a,b){return rb(b)};rb=function(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(_.Ya(a,void 0,0))return}else

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.9	51495	52.94.223.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:22 UTC	658	OUT	GET /s/ecm3?ex=baidu.com&id=22210ca72884d990241bti00lwg6sdrn HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:22 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: H5QZ415ZDQ4XPB1GG8SN Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.9	51494	2.18.96.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:23 UTC	602	OUT	GET /nmedianet.js?cid=8CU551556&ydspr=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:23 UTC	405	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 99374 Content-Type: text/javascript; charset=utf-8 X-MNT-H: 22-5h9m X-MNT-W: 22-5h9m Timing-Allow-Origin: * ETag: "7e4f815cb695c44053429f154dbd3586" Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=300 Expires: Tue, 21 May 2024 09:27:23 GMT Date: Tue, 21 May 2024 09:22:23 GMT Connection: close
2024-05-21 09:22:23 UTC	4	IN	Data Raw: 20 20 20 20 Data Ascii:
2024-05-21 09:22:23 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 3b 76 61 72 20 5f 6d 4e 20 3d 20 7b 22 5f 70 72 69 64 22 3a 22 38 50 52 56 43 58 58 31 39 22 2c 22 5f 63 69 64 22 3a 22 38 43 55 35 35 31 35 35 36 22 2c 22 5f 63 70 63 64 22 3a 22 51 41 79 32 57 62 45 66 4a 5f 5a 47 63 64 50 32 39 72 34 76 65 41 3d 3d 22 2c 22 5f 73 69 7a 65 6d 6f 76 6c 22 3a 7b 22 64 66 22 3a 22 33 32 30 78 35 30 22 2c 22 69 70 61 64 22 3a 22 37 32 38 78 39 30 22 7d 2c 22 5f 76 65 72 49 64 22 3a 22 39 31 31 31 32 39 39 22 2c 22 5f 6f 72 65 66 22 3a 22 22 2c 22 5f 6f 70 74 6f 75 74 22 3a 22 22 2c 22 5f 75 65 6e 63 72 75 22 3a 22 38 43 55 35 35 31 35 35 36 22 2c 22 5f 6c 69 6d 67 42 65 61 63 22 3a 74 72 75 65 2c 22 5f 70 6f 70 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f Data Ascii: (function(){;var _mN = {"_prid":"8PRVCXX19","_cid":"8CU551556","_cpcd":"QAy2WbEfJ_ZGcdP29r4veA==","_sizemovl":{"df":"320x50","ipad":"728x90"},"_verId":"9111299","_oref":"","_optout":"","_uencru":"8CU551556","_limgBeac":true,"_popUrl":"https:\/\/
2024-05-21 09:22:23 UTC	8192	IN	Data Raw: 72 63 65 53 6b 69 70 45 6e 63 2c 63 29 26 26 72 2c 63 3d 70 28 75 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 75 5d 3f 6e 5b 75 5d 2e 76 61 6c 75 65 3a 6e 5b 75 5d 2c 63 29 2c 6f 3d 75 2c 61 2e 24 4b 4d 28 69 2e 73 74 61 72 74 50 61 72 61 6d 73 2c 6f 29 3f 4b 2b 3d 63 3a 28 6f 3d 75 2c 61 2e 24 4b 4d 28 69 2e 65 6e 64 50 61 72 61 6d 73 2c 6f 29 3f 68 2b 3d 63 3a 24 2b 3d 63 29 29 29 3b 72 65 74 75 72 6e 20 4b 2b 24 2b 68 7d 2c 24 4c 61 3a 24 2c 24 4c 62 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 24 28 6e 3d 6f 28 6e 2c 74 2c 6e 2e 6c 65 6e 67 74 68 29 2c 72 2c 22 31 22 29 7d 7d 7d 29 3b 5f 6c 64 28 22 5f 35 4d 22 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: rceSkipEnc,c)&&r,c=p(u,"object"==typeof n[u]?n[u].value:n[u],c),o=u,a.$KM(i.startParams,o)?K+=c:(o=u,a.$KM(i.endParams,o)?h+=c:$+=c)));return K+$+h},$La:$,$Lb:function(n,t,r){return $(n=o(n,t,n.length),r,"1")}}});_ld("_5M",[document],function(o){"use stri
2024-05-21 09:22:23 UTC	16384	IN	Data Raw: 32 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 28 75 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 28 24 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 68 69 73 2e 24 32 64 28 74 2c 6e 29 2c 74 68 69 73 2e 24 32 66 28 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 65 28 69 3f 72 3a 63 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 65 28 69 3f 66 3a 73 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 65 28 69 3f 6f 3a 68 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: 2c=function(t,n){e(u,t,n)},this.$2d=function(t,n){e($,t,n)},this.$2e=function(t,n){this.$2d(t,n),this.$2f(t,n)},this.$2f=function(t,n,i){e(i?r:c,t,n)},this.$2g=function(t,n,i){e(i?f:s,t,n)},this.$2h=function(t,n,i){e(i?o:h,t,n)},this.$2i=function(){return
2024-05-21 09:22:23 UTC	8192	IN	Data Raw: 49 6d 70 29 26 26 28 22 41 4c 4c 22 3d 3d 3d 41 2e 5f 64 56 49 6d 70 7c 7c 45 2e 24 4b 61 28 41 2e 5f 64 56 49 6d 70 2c 41 2e 5f 63 72 69 64 29 29 26 26 28 41 2e 5f 76 49 6d 70 3d 30 29 3b 76 61 72 20 24 3d 45 2e 24 4b 58 28 41 2e 5f 63 75 73 74 6f 6d 2e 24 35 45 29 3f 41 2e 5f 63 75 73 74 6f 6d 2e 24 35 45 28 29 3a 6a 3b 45 2e 24 4b 55 28 24 29 26 26 28 41 2e 5f 63 72 69 64 3d 24 29 2c 45 2e 24 4b 56 28 41 2e 5f 62 65 29 26 26 21 30 3d 3d 3d 41 2e 5f 62 65 26 26 45 2e 24 4b 55 28 41 2e 5f 73 68 66 74 73 74 72 29 26 26 45 2e 24 32 45 28 41 2e 5f 73 68 66 74 6e 29 26 26 45 2e 24 4b 55 28 41 2e 5f 62 64 61 74 61 29 26 26 28 41 2e 5f 62 64 61 74 61 3d 45 2e 24 4b 69 28 45 2e 24 32 4e 28 45 2e 24 4b 6a 28 41 2e 5f 62 64 61 74 61 29 2c 70 61 72 73 65 49 6e 74 Data Ascii: Imp)&&("ALL"===A._dVImp\|\|E.$Ka(A._dVImp,A._crid))&&(A._vImp=0);var $=E.$KX(A._custom.$5E)?A._custom.$5E():j;E.$KU($)&&(A._crid=$),E.$KV(A._be)&&!0===A._be&&E.$KU(A._shftstr)&&E.$2E(A._shftn)&&E.$KU(A._bdata)&&(A._bdata=E.$Ki(E.$2N(E.$Kj(A._bdata),parseInt
2024-05-21 09:22:23 UTC	16384	IN	Data Raw: 2e 24 4b 4c 28 22 76 69 22 29 29 7d 29 29 3a 49 2e 74 72 69 67 67 65 72 4d 75 6c 74 69 4c 61 79 65 72 41 64 54 61 67 45 76 65 6e 74 57 68 65 6e 51 75 65 75 65 64 28 63 2e 24 4b 4c 28 22 76 69 22 29 2c 55 2e 24 77 2e 43 44 4c 2e 24 4c 6c 2c 21 30 2c 7b 63 64 65 70 6c 62 6c 3a 22 61 70 69 5f 6e 6f 74 5f 61 76 61 69 6c 61 62 6c 65 22 7d 2c 63 2e 24 4b 4c 28 22 76 69 22 29 29 7d 63 61 74 63 68 28 24 29 7b 49 2e 74 72 69 67 67 65 72 4d 75 6c 74 69 4c 61 79 65 72 41 64 54 61 67 45 76 65 6e 74 57 68 65 6e 51 75 65 75 65 64 28 63 2e 24 4b 4c 28 22 76 69 22 29 2c 55 2e 24 77 2e 43 44 4c 2e 24 4c 6c 2c 21 30 2c 7b 63 64 65 70 6c 62 6c 3a 22 65 78 63 65 70 74 69 6f 6e 22 7d 2c 63 2e 24 4b 4c 28 22 76 69 22 29 29 7d 5f 2e 24 32 62 28 22 72 61 64 65 70 74 68 22 2c 63 Data Ascii: .$KL("vi"))})):I.triggerMultiLayerAdTagEventWhenQueued(c.$KL("vi"),U.$w.CDL.$Ll,!0,{cdeplbl:"api_not_available"},c.$KL("vi"))}catch($){I.triggerMultiLayerAdTagEventWhenQueued(c.$KL("vi"),U.$w.CDL.$Ll,!0,{cdeplbl:"exception"},c.$KL("vi"))}_.$2b("radepth",c
2024-05-21 09:22:23 UTC	8192	IN	Data Raw: 28 6f 2e 24 44 6b 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 21 73 2e 68 61 73 54 63 44 61 74 61 4c 6f 61 64 65 64 28 29 26 26 73 2e 69 73 47 64 70 72 41 70 70 6c 69 63 61 62 6c 65 28 29 26 26 21 31 3d 3d 3d 6e 2e 24 44 78 28 6f 2e 24 44 70 29 7d 72 65 74 75 72 6e 20 6e 3d 6e 65 77 20 74 2c 7b 69 73 47 64 70 72 41 70 70 6c 69 63 61 62 6c 65 3a 73 2e 69 73 47 64 70 72 41 70 70 6c 69 63 61 62 6c 65 2c 24 44 30 3a 73 2e 24 44 30 2c 67 65 74 50 61 72 61 6d 73 46 6f 72 50 61 67 65 56 69 65 77 4c 6f 67 67 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 2c 65 3b 72 65 74 75 72 6e 7b 74 63 66 5f 63 73 74 72 3a 28 65 3d 5b 5d 2c 44 2e 65 61 63 68 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 2d 31 5d 3d 6e 2e 24 44 78 28 Data Ascii: (o.$Dk)}function i(){return!!s.hasTcDataLoaded()&&s.isGdprApplicable()&&!1===n.$Dx(o.$Dp)}return n=new t,{isGdprApplicable:s.isGdprApplicable,$D0:s.$D0,getParamsForPageViewLogging:function(){var r,e;return{tcf_cstr:(e=[],D.each(o,function(t){e[t-1]=n.$Dx(
2024-05-21 09:22:23 UTC	16384	IN	Data Raw: 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 65 3d 6e 65 77 20 65 28 6e 2e 76 69 65 77 54 68 72 65 73 68 6f 6c 64 2c 6e 2e 77 61 69 74 54 69 6d 65 29 3b 74 72 79 7b 65 2e 69 6e 69 74 28 7b 63 3a 74 2c 66 72 61 6d 65 3a 74 2c 63 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 28 74 2c 69 2c 21 30 29 7d 7d 29 7d 63 61 74 63 68 28 69 29 7b 7d 7d 7d 7d 74 68 69 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 74 72 79 7b 6f 3d 69 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 3f 28 6f 2e 24 4b 4b 28 22 69 73 69 6f 6c 63 22 2c 22 31 22 2c 5b 6f 2e 24 4c 37 5d 29 2c 67 29 3a 28 6f 2e 24 4b 4b 28 22 69 73 69 6f 6c Data Ascii: if(null!=e){e=new e(n.viewThreshold,n.waitTime);try{e.init({c:t,frame:t,cb:function(){_(t,i,!0)}})}catch(i){}}}}this.init=function(i){try{o=i;var n=function(){},n="function"==typeof window.IntersectionObserver?(o.$KK("isiolc","1",[o.$L7]),g):(o.$KK("isiol
2024-05-21 09:22:23 UTC	8192	IN	Data Raw: 22 61 64 70 6c 22 2c 74 70 3a 22 66 63 62 6c 6f 63 6b 22 2c 66 70 3a 22 22 2c 63 69 64 3a 28 74 3d 65 29 2e 24 4b 4c 28 22 63 69 64 22 29 2c 63 72 69 64 3a 74 2e 24 4b 4c 28 22 63 72 69 64 22 29 2c 70 69 64 3a 74 2e 24 4b 4c 28 22 70 69 64 22 29 2c 72 65 71 75 72 6c 3a 75 2e 24 4b 69 28 74 2e 24 4b 4c 28 22 72 65 71 75 72 6c 22 29 2e 72 65 70 6c 61 63 65 28 2f 23 2e 2a 2f 67 2c 22 22 29 7c 7c 22 22 29 2c 63 68 69 64 3a 74 2e 24 4b 4c 28 22 63 68 69 64 22 29 2c 76 69 3a 74 2e 24 4b 4c 28 22 76 69 22 29 2c 75 67 64 3a 74 2e 24 4b 4c 28 22 75 67 64 22 29 2c 63 6d 65 3a 74 2e 24 4b 4c 28 22 63 6d 65 22 29 2c 63 63 3a 74 2e 24 4b 4c 28 22 63 63 22 29 2c 61 64 74 31 3a 74 2e 24 4b 4c 28 22 61 64 74 31 22 29 7c 7c 22 22 2c 61 64 74 32 3a 74 2e 24 4b 4c 28 22 61 Data Ascii: "adpl",tp:"fcblock",fp:"",cid:(t=e).$KL("cid"),crid:t.$KL("crid"),pid:t.$KL("pid"),requrl:u.$Ki(t.$KL("requrl").replace(/#.*/g,"")\|\|""),chid:t.$KL("chid"),vi:t.$KL("vi"),ugd:t.$KL("ugd"),cme:t.$KL("cme"),cc:t.$KL("cc"),adt1:t.$KL("adt1")\|\|"",adt2:t.$KL("a
2024-05-21 09:22:23 UTC	1066	IN	Data Raw: 4b 55 28 65 5b 31 5d 29 29 72 65 74 75 72 6e 20 72 3d 65 5b 30 5d 2c 65 3d 65 5b 31 5d 2c 7b 77 3a 72 2c 68 3a 31 3d 3d 3d 74 2e 24 4b 4c 28 22 68 65 69 67 68 74 5a 65 72 6f 22 29 3f 22 30 22 3a 65 7d 7d 7d 2c 24 4b 34 3a 79 7d 7d 29 3b 5f 6c 64 28 22 5f 54 22 2c 5b 22 75 74 69 6c 22 2c 22 5f 51 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6f 2c 74 29 7b 76 61 72 20 6e 3d 6f 2e 24 32 24 28 22 5f 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 24 29 7b 72 65 74 75 72 6e 20 6f 2e 24 4b 55 28 24 2e 24 4b 4c 28 22 63 75 73 74 6f 6d 4c 32 53 65 74 74 69 6e 67 73 50 61 74 68 22 29 29 3f 24 2e 24 4b 4c 28 22 63 75 73 74 6f 6d 4c 32 53 65 74 74 69 6e 67 73 50 61 74 68 22 29 3a 24 2e 24 4b 4c 28 22 73 6d 70 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 69 2c 72 29 7b 76 61 72 20 Data Ascii: KU(e[1]))return r=e[0],e=e[1],{w:r,h:1===t.$KL("heightZero")?"0":e}}},$K4:y}});_ld("_T",["util","_Q"],function(o,t){var n=o.$2$("_s");function c($){return o.$KU($.$KL("customL2SettingsPath"))?$.$KL("customL2SettingsPath"):$.$KL("smp")}function i(i,r){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.9	51514	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:23 UTC	791	OUT	GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4 HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:23 UTC	480	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: text/html; charset=UTF-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:22 GMT content-length: 54 x-envoy-upstream-service-time: 1 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:23 UTC	54	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title></title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.9	51513	142.250.185.226	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:23 UTC	1515	OUT	GET /pcs/view?xai=AKAOjsuausArccfR5bCUWPb1Si8Q7aGxuVlqFwotojvmO0bH7TNXTx89oapxI9iMwH5E5J4L5MXmT82LLjwo3dF59FsAWzYsNutnwhH1rpTuxg1twK6mVpIh4basDdyzDFO9-PLWZNpezvuN3wxfRv904MLlp3q0uNJ-3ALqEKLGhKO1Mu_3QT9XpZZdKNkmBqw91cqG5bezAQtIEMFTdF5ggKW5LKWBMlHjGZpCzneSSDVVNUHH36N_zcNDj6RXoBawgRwMRCjY8ZdAzSqQw44cuDJi_QI6RKcBT0fZMRkhIENhg7bUdflDVBSAMVYGy6Fer8-PJ3XHGaW0jSCN05eNUdkCAFZroSZVtZCI8zU7SRtrjq9NB2V0p-EuLlQOYtY_PI9NLWgTUBn8Yjj9aqh6Uw&sai=AMfl-YTFULuL5l-XlpJtUCmCzu9QMr9ZBLC8Z8ZX4_2jj3AvLP8WKWLJo5duTdfY3vY4xgAMYaoKhUwg7KRcw_J_3bUqzig1kky8ZuAyRW5lr3XqTsCzOao05HFKRFP-svz84M3xD70WO3mKR5FgD7hUaQ&sig=Cg0ArKJSzOT93KDPV1RcEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:23 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Tue, 21 May 2024 09:22:23 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 21-May-2024 09:37:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Tue, 21 May 2024 09:22:23 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.9	51535	130.211.23.194	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:23 UTC	572	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:23 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Tue, 21 May 2024 09:22:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.9	51541	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:23 UTC	886	OUT	GET /live/liveView.php?s=105367&schain=1.0,1!monumetric.com,fdd82422-8575-448e-84fe-fa092518ca2d,1&cbuster=1716283341&pubUrlAuto=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&videoType=flow&floatWidth=&floatHeight=&floatDirection=&floatVerticalOffset=&floatHorizontalOffset=&floatCloseBtn=&flowMode=&flowCloseButtonPosition= HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:22:23 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Tue, 21 May 2024 09:22:23 GMT set-cookie: csuuid=664c679d515d1; expires=Sat, 15-Jun-2024 09:22:23 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-origin: * cache-control: no-store pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 372875ad1ec20daf24f3f29f14a73cd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BK6Iu04qqQ7MH_irxgInqRrE9KI2FLOXlGTAYkGUNWPFIPu64rmp8g== Age: 0
2024-05-21 09:22:23 UTC	5497	IN	Data Raw: 31 35 37 31 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 73 41 72 72 61 79 20 3d 20 27 20 20 68 74 74 70 73 3a 2f 2f 6c 69 76 65 2e 70 72 69 6d 69 73 2e 74 65 63 68 2f 6d 61 69 6e 2f 6a 73 2f 64 65 66 6c 61 74 65 2e 6d 69 6e 2e 6a 73 20 20 68 74 74 70 73 3a 2f 2f 6c 69 76 65 2e 70 72 69 6d 69 73 2e 74 65 63 68 2f 63 6f 6e 74 65 6e 74 2f 6f 6d 69 64 2f 73 74 61 74 69 63 2f 6f 6d 77 65 62 2d 76 31 2e 6d 69 6e 2e 6a 73 20 20 68 74 74 70 73 3a 2f 2f 6c 69 76 65 2e 70 72 69 6d 69 73 2e 74 65 63 68 2f 63 6f 6e 74 65 6e 74 Data Ascii: 1571 try { var linksArray = ' https://live.primis.tech/main/js/deflate.min.js https://live.primis.tech/content/omid/static/omweb-v1.min.js https://live.primis.tech/content
2024-05-21 09:22:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.9	51549	159.223.96.127	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	1428	OUT	GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=FtL112rUvKzIEDSDSVAlFzkOJyA2IGYIKXdDLUl8diFhfFZFYUJ6GXl1dWQgURdiFSlYZWdyYHNXQ2dEeUtxdCExJgMWZkN%2BTit0JmRmHlBgEHgffXV8aidQRWIXfUp5dHMwJwZHMUJpVmtwImBxARczQC9NfXF1MHQCQ2ISKB9%2BJiBxaBBEYUF9SnF1cTEiB0NnF3wZL3xyZXQBR2RUZ1h%2FdnZiJgJLY0F6S3FxcWsnA0tkQipPfHBmf2YEQWETckJ5cSYxd1EWYxUuHnt1J2BzBxB3WmlMeyMhZnNREDEQfEgtcXFgfANBYUN6SihnaHFyB0czQnNPenN0ZSUDE2dBcx59ciVjcAtQCFppGSYwKidmCEJ5VCweOTdmaT8QGyYzHlhzIyU%2FN1dedxEvCjtnfnF0EF53ES8KOwYrPTdXHCFUcVhraWYmN2IAPAAqGTBnfnFmT153BS4JOiwrPWYIUGMSe058JHxqaVZHNkdmTXp8IX4hCksxW3lMcCYlZCZURG0Sf1hlZyc8KlwXNgIiFScMIHF%2BEERmQS5MfHFyNyFREG1EL058d3dlIgIUbVRnWCA2DTU2Ux8wVHEOOzAhLg%3D%3D
2024-05-21 09:22:24 UTC	1315	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; Domain=.cootlogix.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:24 GMT; Secure; SameSite=None set-cookie: vdzj1_3646a4db=dFf142JDhjx0i4Z0GeISWg0CRgMXgxGKRJ9PmsHLHddWR0CUVBtBHNUKgJ6dV8OG1VeVzgSa0d%2FAX0hWVhKAlgMa1UlB3hWeXFdXhoBCwN4HGVQLwEvcFhSQVMLA21RcVV5A30nC15NVF0WdhJyA3oHeSEOXBwHXQBrU3dVeAUuJw1dG1RLGHgGc1J%2FAnJ0XQgeBVgGOwckA3AEfHRbX0kSRRZsA3VUKwJzcl9bSQhdAWJTdlx4BitxXV9aHEsCaQQiXHECfiYKWRtUX1c%2FVHVVKgF9cQpIVBJfBjxVclIqUC4iX1gcBFwHYgF0UXwDeiVKRloGXAE8BH9QegR6cglbGQJeDD4EcAR5BnNmNUZaUwZBNERlX3keaCMMGgoSU094WTQgHBBwIgkGC1VFFj1UNxdrCGh0SkZaVw1EKHMoCzpXJDBKUFoSRRYvQxcXIEQrJxFIQhJLSXYSNAA6QSMrBkhCEl9QagRyBHELZyBdCUkdXgdjVWoAcQsuaVpcQVMIAzhWcV0tBmhoSgkXXgdROUQuCid7LmZSSE4DXlFsBXNTLVcpJlBYHARcBmkGIVUvCmhoSgMLeQ9GO10iR3NGODENFw%3D%3D; Domain=.cootlogix.com; Path=/; Expires=Tue, 21 May 2024 09:37:24 GMT; Secure; SameSite=None content-type: text/html content-length: 2050 date: Tue, 21 May 2024 09:22:24 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:24 UTC	1576	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 3d 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 76 61 72 20 73 79 6e 63 73 3d 5b 27 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 67 6f 2e 73 6f 6e 6f 62 69 2e 63 6f 6d 2f 75 73 3f 6c 6f 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 63 6f 6f 74 6c 6f 67 69 78 2e 63 6f 6d 25 32 46 61 70 69 25 32 46 63 6f 6f 6b 69 65 25 33 46 70 61 72 74 6e 65 72 49 64 25 Data Ascii: <html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%
2024-05-21 09:22:24 UTC	474	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 74 2e 61 64 78 2e 6f 70 65 72 61 2e 63 6f 6d 2f 70 75 62 2f 73 79 6e 63 3f 70 75 62 69 64 3d 70 75 62 31 30 30 38 34 34 36 35 32 37 34 31 37 36 26 67 64 70 72 3d 30 26 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 70 78 22 20 68 65 69 67 68 74 3d 22 31 70 78 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 3e 3c 2f 69 66 72 61 6d 65 3e 27 5d 2c 20 69 6e 74 65 72 76 61 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 55 72 6c 28 29 7b 76 61 72 20 73 79 6e 63 3d 73 79 6e 63 Data Ascii: "https://t.adx.opera.com/pub/sync?pubid=pub10084465274176&gdpr=0&consent=&us_privacy=" scrolling="no" marginheight="0" marginwidth="0" frameborder="0" width="1px" height="1px" style="display: none" ></iframe>'], interval;function insertUrl(){var sync=sync

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.9	51546	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	700	OUT	GET /usersync?ttt=1&src=2&cspi=0&cn=4&spui=&dpui=IsTyALZHNuVjvTOGTxWA7BW5 HTTP/1.1 Host: x.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:24 UTC	527	IN	HTTP/1.1 200 OK access-control-allow-origin: https://sync.serverbid.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: image/gif content-length: 35 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:24 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:24 GMT connection: close
2024-05-21 09:22:24 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.9	51547	52.208.36.168	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	1143	OUT	GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2NvbnN1bWFibGU6NzI4eDkw&v=5&s=v31hud7au49&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjkyNTgzODQsImwiOjU1MjkwOTk1NjYsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREEuQiIsInkiOjAsImNvIjowLCJzIjoibW10LTc2NjBmMDk1LTg1NjctNGUxMy1iMjY2LWVkZTc5YzFmN2ExOV8xXzFfYWQifX0%3D&cb=4264316&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwyTnZibk4xYldGaWJHVTZOekk0ZURrdyIsIndkIjp7ImsuaGJfYmlkZGVyIjoiY29uc3VtYWJsZSIsImsuaGJfc2l6ZSI6IjcyOHg5MCJ9LCJ3ciI6NDB9 HTTP/1.1 Host: protected-by.clarium.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:24 UTC	280	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:24 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx/1.18.0 (Ubuntu) Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Pragma: no-cache Expires: Sat, 26 Jul 1997 05:00:00 GMT
2024-05-21 09:22:24 UTC	74	IN	Data Raw: 34 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 18 57 63 60 60 00 00 00 03 00 01 68 26 59 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 44PNGIHDRIDATWc``h&YIENDB`
2024-05-21 09:22:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.9	51548	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	865	OUT	GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=12_1716283291_1716283340
2024-05-21 09:22:24 UTC	278	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2357 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:22:24 GMT server: envoy vary: accept-encoding, Accept-Encoding x-envoy-upstream-service-time: 1 connection: close
2024-05-21 09:22:24 UTC	2357	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.9	51551	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	791	OUT	GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4 HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:24 UTC	488	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: text/html; charset=UTF-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:24 GMT x-envoy-upstream-service-time: 4 server: ayl-lb-fra02 connection: close transfer-encoding: chunked
2024-05-21 09:22:24 UTC	5609	IN	Data Raw: 31 35 64 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 32 46 76 69 73 69 74 6f 72 25 32 46 73 79 6e 63 25 33 46 6e 61 6d 65 25 33 44 58 61 6e 64 72 25 32 42 25 32 35 45 32 25 32 35 38 30 25 32 35 39 33 25 32 42 49 6e 76 65 73 74 25 32 42 44 53 50 25 32 36 74 74 6c 25 33 44 37 32 30 25 32 36 75 69 64 25 33 44 34 38 64 35 37 31 33 64 35 63 35 36 33 63 62 61 32 30 34 39 66 35 30 35 Data Ascii: 15dc<html><head><title></title></head><body><img style="display:none;" src="https://secure.adnxs.com/getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cba2049f505

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.9	51544	2.18.96.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	830	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid=77&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:25 UTC	537	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 27419 Content-Type: text/html; charset=UTF-8 Set-Cookie: visitor-id=3592849456404766000V10; Expires=Wed, 21 May 2025 09:22:25 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Thu, 23 May 2024 09:22:25 GMT Date: Tue, 21 May 2024 09:22:25 GMT Connection: close
2024-05-21 09:22:25 UTC	215	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 35 33 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"
2024-05-21 09:22:25 UTC	16384	IN	Data Raw: 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 65 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 6c 6f 6f 6b 75 70 22 3a 7b 22 67 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 22 2c 22 74 69 6d 65 22 3a 31 34 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 2d 67 22 2c 22 75 72 6c 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 67 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 5c 2f 70 69 78 65 6c 3f 63 73 3d 38 26 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6d 65 64 69 61 26 67 6f 6f 67 6c 65 5f 63 6d 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 3c 65 6e 63 62 36 34 76 73 69 64 3e 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 Data Ascii: US","zone":"e","coc":"NA"},"cs":"8","lookup":{"g":{"name":"g","time":14,"cookie":"data-g","urls":[{"type":"img","url":"https:\/\/cm.g.doubleclick.net\/pixel?cs=8&google_nid=media&google_cm=1&google_hm=<encb64vsid>&google_sc=1&gdpr=${GDPR}&gdpr_consent=${G
2024-05-21 09:22:25 UTC	8192	IN	Data Raw: 65 72 73 69 6f 6e 28 29 2c 73 2e 67 64 70 72 3d 6e 2e 67 65 74 47 44 50 52 46 6c 61 67 28 29 3f 31 3a 30 2c 73 2e 63 73 65 78 3d 6e 2e 67 65 74 47 44 50 52 43 6f 6e 73 65 6e 74 28 29 7c 7c 30 2c 73 2e 63 73 73 74 72 3d 61 28 29 2c 73 2e 75 73 70 5f 73 74 61 74 75 73 3d 6e 2e 67 65 74 43 63 70 61 46 6c 61 67 28 29 3f 31 3a 30 2c 73 2e 75 73 63 3d 6e 2e 67 65 74 43 63 70 61 43 6f 6e 73 65 6e 74 28 29 7c 7c 30 2c 73 2e 76 73 69 64 3d 6e 2e 67 65 74 56 69 73 69 74 6f 72 49 64 28 29 7c 7c 22 22 2c 73 2e 6c 70 65 72 3d 6e 2e 73 68 6f 75 6c 64 46 61 69 6c 6f 76 65 72 28 29 3f 6e 2e 67 65 74 46 61 69 6c 75 72 65 4c 70 65 72 28 29 3a 6e 2e 67 65 74 53 75 63 63 65 73 73 4c 70 65 72 28 29 2c 73 2e 74 72 3d 31 65 33 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 73 29 Data Ascii: ersion(),s.gdpr=n.getGDPRFlag()?1:0,s.csex=n.getGDPRConsent()\|\|0,s.csstr=a(),s.usp_status=n.getCcpaFlag()?1:0,s.usc=n.getCcpaConsent()\|\|0,s.vsid=n.getVisitorId()\|\|"",s.lper=n.shouldFailover()?n.getFailureLper():n.getSuccessLper(),s.tr=1e3*Math.random(),s)
2024-05-21 09:22:25 UTC	2628	IN	Data Raw: 2c 73 74 6f 70 50 65 72 69 6f 64 69 63 53 79 6e 63 3a 61 2c 73 74 61 72 74 50 65 72 69 6f 64 69 63 53 79 6e 63 3a 75 7d 7d 29 3b 5f 63 44 28 22 6d 6e 73 79 6e 63 22 2c 5b 77 69 6e 64 6f 77 2c 77 69 6e 64 6f 77 2e 5f 6d 4e 43 6b 2e 75 74 69 6c 2c 22 65 6d 22 2c 22 76 69 73 69 74 6f 72 63 6b 73 79 6e 63 22 2c 22 63 6b 73 79 6e 63 22 2c 22 72 65 73 22 2c 22 6e 65 78 74 73 65 72 76 69 63 65 22 2c 22 64 72 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 2c 74 2c 6e 2c 72 2c 73 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 69 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 43 68 65 63 6b 53 79 6e 63 55 72 6c 28 22 68 62 22 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ,stopPeriodicSync:a,startPeriodicSync:u}});_cD("mnsync",[window,window._mNCk.util,"em","visitorcksync","cksync","res","nextservice","drs"],function(e,i,o,t,n,r,s,c){"use strict";function u(){return"1"===i.getQueryParamValueFromCheckSyncUrl("hb")}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.9	51555	172.217.16.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	1024	OUT	GET /f/AGSKWxVcG-cP31phx7Rj168nGI4hx9CH1hnFpEcZajR6QOQpi6FnhhxQOxY3_slJYXJXw8tv2EgEiFozw5geU56wHXQ7JnrMA18PMavwL04Bz2JffLH6Q9_2F3L3GeBhKOuUn9OkpZjCvA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzE2MjgzMzQyLDI2MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwczovL2N1c3RvbW1hcHBvc3Rlci5jb20vYXJ0aWNsZS90b3AvOTI2IixudWxsLFtbOCwid1NuTFo3M2FaQTgiXSxbOSwiZW4tVVMiXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:24 UTC	1921	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 21 May 2024 09:22:24 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-tK7-tvwM86NI6q_C-mRpcw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjytDikmII0JBiOO90h-k6EBtoPGeyAGKJry-ZtIA45vl01hQgdkqfwRoCxD71M1jjgLj15jnW6UCc9O88awkQ71x8gfUgEK86coF1ExC3f77AOhOIv7FfZP0HxEI8HBfOb9zEJnBh2vIOJiWNpPzC-OT8vJKizKTSkvyitOS01OLUorLUongjAyMTA1NDSz0D8_gCAwCVGUN_" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:22:24 UTC	1921	IN	Data Raw: 62 34 31 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 70 42 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 41 28 70 42 2c 5f 2e Data Ascii: b41if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var pB=function(a){this.l=_.u(a)};_.A(pB,_.
2024-05-21 09:22:24 UTC	967	IN	Data Raw: 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 58 50 4d 50 32 6f 32 4a 55 57 67 57 43 51 4c 4e 6a 51 78 74 64 4d 51 68 72 71 47 70 73 78 71 4f 53 30 51 68 5f 67 51 6d 4c 34 57 52 71 37 43 57 6a 6f 76 70 68 39 74 35 45 68 76 7a 77 2d 41 48 45 45 6d 78 56 75 46 38 66 56 69 73 38 43 64 73 4f 73 48 61 4f 49 37 5f 4f 4c 61 6a 33 53 58 65 54 77 4c 6c 61 56 71 4d 41 54 35 62 42 61 76 47 6b 46 55 49 4e 46 42 30 73 32 53 59 54 4f 72 2d 4a 61 54 4d 72 44 6c 51 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 78 32 32 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 5c 78 35 62 37 5c 78 35 64 5c 78 35 64 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c Data Ascii: ingchoicesmessages.google.com\/f\/AGSKWxXPMP2o2JUWgWCQLNjQxtdMQhrqGpsxqOS0Qh_gQmL4WRq7CWjovph9t5Ehvzw-AHEEmxVuF8fVis8CdsOsHaOI7_OLaj3SXeTwLlaVqMAT5bBavGkFUINFB0s2SYTOr-JaTMrDlQ\\\\u003d\\\\u003d\\\x22\x5d,\x5bnull,\x5b7\x5d\x5d,null,null,null,null,null,\\
2024-05-21 09:22:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.9	51545	134.122.125.115	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	1624	OUT	GET /api/sync/iframe/?cid=65b2119efa63bcb4a70d58bb&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wxX13Vswd8pQWAJ4F1LVEHBUoEPzIzORZ8anRFRFNZRmM1cXtVJQdiQUBQDEhnMXh6AHETelFBVl5FZm8gcgwjUjNBQVcNEmduIHoHcAR0X1VSC0cwYXF6B3dQNUVDVg9EZW93LAx%2FAWdRW0YOQ2Y2d3sHfgJlQ0BTDUhjZHJ7UX8HN0VVSBpGYmAgfAQlV2IQQwIKEWA1dnxXcQQ0RUFGFFJnZHYrAX4AbkIWBw5EY2B1fgxwV2UWEVcaXHNhcn1VcAAwR0YFW0ZlZXZ%2BAH4HMEsSBlpSfXV3eQQgBWRBE1YPRjU1IywDfgVjEBVdABJze2N8B3VSYUUSUg9EZ2JwfQMnUm4VEwYBFWB1bWgCdQY3RhICCUQyYyd4VXdTYUUUUw1EN2FjZhZwAjIVE1YNQmRjI31VJFNmQRFVDUNnYndoGGQHZUQTVAlEZm4ieQJ0A2dEFAVbEWlnIH0WahNgQEAFDkNlM3UpACADN0IVUw4TZmFwLgxkHXRFRFNZRTdidXtVJQdiQUBQDEhnMXl4BHATelFBVw8RZDEjKQd1AWFEQlwKQ2JmJHMCfgd0X1VSC0cwYXNyUXdQNUVDVg9EZW93LA12BWRRKkgaEz4iLz4WfAF6URAASAJzbTo3GGRCMwAEDVcec21jflcgBWMXFlYVQjUyJWcEdlUyXkEGCxV8MiVzAHdVNUZOXAxEc3tjKVsoXzMQAw1XHhgzY3AWcAQ0QUZVARU3Nnd5ViVTYhJAVFxFaTUjaEk%3D
2024-05-21 09:22:24 UTC	1564	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; Domain=.kueezrtb.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:24 GMT; Secure; SameSite=None set-cookie: vdzj1_e8c24d42=lnd13CwwORHRtrQsKhOFUHLiA8PBEAIlFxM2FBRHgzfmAWQmASKF53RUB7ZnBkEkthR3xKb1VBfTR9ZUwTaUsuCyZFQXxnKmRNE2FAfV1hW1V5YX8zQkJhQHoJIEFDfWV8ZkxEN0tyWHJVW21ke2UVRGBAc1twR0B4Z3BgR0FgFnJeIkFVY3B%2BYUMTZ0MoDncUQylgKWMWRWcQfF0hQUFtfmpkR0UwRnNZe0YWLGR8YENGZUt9DnASEXxwZHBCQWYSfVklQ0YuMX5mRkVlR3NeJU8SLTBqflZEYkMtXHFFE31lfjYWEDdEc1x2FBV2aipwWFBnQHgLdEESeWV8ZEFDZkQqC3sREy1rLWNWXnNFeF8iQhIpY3wxQBRjEnoKdEEUeGd8NEJQfVF9WycRE31nemdAEGYSKQpzRRF%2BZ3tkQURzX2lecEATf2N8ZU0RYkV5WnJAFC4xKWpEE2ZRZ0p1REAuZHtmEEYyRy1aIkYVeGQrZUJDNUtpRGFBRHgzfTRBRmASKF53RUB7ZnBkEkpjQ31Kb1VBfGUpZxIQMkB4WHRAQndge2FFF2hFc15hW1V5YX8zQkBpFnoJIEFDfWV8ZkxEN0p7XHFVKmNwKz0BHCVRcVhvVRArIjpwTglzGjgtFlVNKTMkIRFecxQvGDFVTW1ian5WFTUDOSssGQQqPDxwTlBzX2kdMCcFJiQpMQ1Qa1FpFW9VBCohOzsbHHNJaVwgEUN6NilgWUA1Fi9Fc0cTK39%2BMEcXfBYvUXdGEyxncWpARnNfaQssGRkqMTw7GxwYF2lSYUFCLWB5Y00XNxJ9WyEUFXszf2IQR2kRKUpvVR48Gy4gFR80UXEcMQISMg%3D%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:37:24 GMT; Secure; SameSite=None content-type: text/html content-length: 4677 date: Tue, 21 May 2024 09:22:24 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:24 UTC	4677	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 3d 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 76 61 72 20 73 79 6e 63 73 3d 5b 27 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 67 6f 2e 73 6f 6e 6f 62 69 2e 63 6f 6d 2f 75 73 3f 6c 6f 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 6b 75 65 65 7a 72 74 62 2e 63 6f 6d 25 32 46 61 70 69 25 32 46 63 6f 6f 6b 69 65 25 33 46 70 61 72 74 6e 65 72 49 64 25 33 Data Ascii: <html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.9	51550	13.32.27.11	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	855	OUT	GET /ss/2000033.html HTTP/1.1 Host: sync.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63 If-None-Match: "e38bb0a0fe3342dbe3b05144c01ddd70" If-Modified-Since: Mon, 20 May 2024 14:32:41 GMT
2024-05-21 09:22:24 UTC	414	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 21 May 2024 09:22:24 GMT ETag: "e38bb0a0fe3342dbe3b05144c01ddd70" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a7631312afe99e40229aa0da70662112.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: s4mhxagSSfzp4gvucHgoOLG5EyS4fYk8cnhkX4dPzHu98bLpDYjArg== Age: 55068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.9	51553	142.250.74.198	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	817	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkf3t8olHR_EUxNf4hTrwYC4PEPFkhlitpzMntdPttbPKRAr_J8sFUOaajViP8
2024-05-21 09:22:24 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 21 May 2024 04:42:40 GMT Expires: Wed, 22 May 2024 04:42:40 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 16784 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:24 UTC	644	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-05-21 09:22:24 UTC	434	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.9	51554	172.67.69.19	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	589	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:24 UTC	1222	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPof8oVZy8f-YawZYTApO5mAq3xTkpTgU5AAGDdN2ngyWVPi1E3pZwAWofBj9c1HY-4-Yxw x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 22 May 2024 09:22:24 GMT Cache-Control: public, max-age=86400 Age: 54 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJthxDrZ%2FC6lWG2%2BUrQXxRZvoH9ITFZFB7cixsdHLsEkE8pBOnf%2Bfkp%2F%2FGPRfusOyWLtkSNgTCSU9THnQvwpCcCHGqjgbaUbgDOB95evxppGgFLYYLXdX0DNoVJfomuEIg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887380775d790f75-EWR
2024-05-21 09:22:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.9	51552	172.67.69.19	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:24 UTC	610	OUT	GET /px.gif?ch=1&e=0.3701101614914333 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:24 UTC	1229	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpNNajJRSFwM_0C3hYzCNCujkAURVj2eJaHaN1pvAL62OV4Db0k-n6McK_DMWi8P7kNfg x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 22 May 2024 09:22:24 GMT Cache-Control: public, max-age=86400 Age: 722129 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wRb0EGbB5wcpnJcvfC81Gl3gCta5am%2FUbfvG%2BjzJiyrrk7T1KA2%2Ffg0vVJOUO%2Fy0G6MeI79T%2F1oWx5awnZcScgcvcseOxnXzpnMaUPeYF%2BDkdom7DJ78ZvH9rV%2BtDqJ8vQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88738077597842ef-EWR
2024-05-21 09:22:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.9	51556	162.19.138.82	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	413	OUT	GET /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=b24bd4eb-b438-74c2-9763-2aaaf344e281#1716283293605#4; 3pi=
2024-05-21 09:22:25 UTC	240	IN	HTTP/1.1 400 Bad Request date: Tue, 21 May 2024 09:22:25 GMT vary: Accept-Encoding content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-21 09:22:25 UTC	409	IN	Data Raw: 31 39 32 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 22 72 65 71 75 65 73 74 5f 66 6f 72 6d 61 74 5f 69 6e 76 61 6c 69 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 32 43 6f 6e 74 72 6f 6c 6c 65 72 2e 6d 75 6c 74 69 70 6c 65 78 46 65 74 63 68 56 33 28 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 77 65 62 2e 6d 75 6c 74 69 Data Ascii: 192{"error":{"code":"request_format_invalid","message":"Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.multiplexFetchV3(io.id5.fetch.request.web.multi
2024-05-21 09:22:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.9	51559	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	1445	OUT	GET /static-res/css/newsike.css?id=98d7a23ace76a572352b HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283337.0.0.0 If-Modified-Since: Tue, 21 May 2024 07:30:56 GMT
2024-05-21 09:22:25 UTC	581	IN	HTTP/1.1 304 Not Modified Date: Tue, 21 May 2024 09:22:25 GMT Connection: close Last-Modified: Tue, 21 May 2024 07:30:56 GMT CF-Cache-Status: HIT Age: 6689 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAdpCTtfdJwVk86vPi%2F7u23FFuNfLeBEz%2FjYUCBc5PYN5aD9WWLCwO%2Ftxt9VDzuCPkIJgu%2BQ1d3vyMLcKhXS%2FFUhHeqbu%2BUTdFdCW5A7Sy8GvfrhwjAl72%2BVo4HVW39%2F6BaOXWjm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8873807c0de77d26-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.9	51558	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	1429	OUT	GET /static-res/js/newsike.js?id=2e2993cb3d75bb3492b1 HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283337.0.0.0 If-Modified-Since: Tue, 21 May 2024 09:10:49 GMT
2024-05-21 09:22:25 UTC	574	IN	HTTP/1.1 304 Not Modified Date: Tue, 21 May 2024 09:22:25 GMT Connection: close Last-Modified: Tue, 21 May 2024 09:10:49 GMT CF-Cache-Status: HIT Age: 696 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PQHj43ifvkImNuaeWp1ER09D3hSvt6TnLh0bKUmR%2BwPkFZSb6n5nui1gzvu5bacz5hcTOt6PBWOkR84qpNIJDKwQSO%2Bg%2BlcSPzvPt3BNUGPej3iQiPrEiiomkyiyl%2FTX0MAzlTz%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8873807c0c064390-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.9	51557	34.254.84.230	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	706	OUT	GET /cookie-sync/amzn?redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAJq3k7MmM8AABT0lzVYQg; bitoIsSecure=ok
2024-05-21 09:22:25 UTC	396	IN	HTTP/1.1 303 See Other Date: Tue, 21 May 2024 09:22:25 GMT location: https://s.amazon-adsystem.com/ecm3?id=AAJq3k7MmM8AABT0lzVYQg&ex=beeswax.com Server: gunicorn set-cookie: bito=AAJq3k7MmM8AABT0lzVYQg; Domain=bidr.io; expires=Fri, 20 Jun 2025 05:22:25 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.9	51568	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	767	OUT	GET /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283340902:1716283340902
2024-05-21 09:22:25 UTC	557	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 21 May 2024 09:22:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 152 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:25 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 70 75 62 6c 69 63 2f 68 62 2f 62 69 64 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /public/hb/bid</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.9	51564	69.166.1.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	914	OUT	GET /us?loc=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dsonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%5BUID%5D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; HAPLB8G=s85190\|Zkxnz
2024-05-21 09:22:25 UTC	814	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:25 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 location: https://sync.cootlogix.com/api/cookie?partnerId=sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=054b4136-01f6-45be-b12f-751883821122 set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:22:24 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxn1; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.9	51560	54.76.86.242	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	1131	OUT	GET /hbid/imp?displaymanager=Prebid.js%20-%20gumgum&displaymanagerver=8.46.0&lt=1716283328986&to=240&id5Id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&id5IdLinkType=null&aun=mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad&id5id=ID5eMAz8W9Us9etNrxQU31SdBDIgIMiva5JoiMboRweb26gNFm4Sy4mHUi0q8VkIwi5&pubcid=55096b65-6c25-42da-aa9f-c1360ab7d762&tdid=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&gpid=%2F20842576%2C23078258603%2FKJI01M%2FKJI01M-DDA.B%23anchor-2&t=b2tgmbqd&pi=2&schain=1.0%2C1!monumetric.com%2Cfdd82422-8575-448e-84fe-fa092518ca2d%2C1%2C%2C%2C&vw=1280&vh=907&sw=1280&sh=1024&pu=https%3A%2F%2Fcustommapposter.com%2F&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%228.46.0%22%7D&ogu=null&ns=1331 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:25 UTC	454	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:25 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 795 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Wed, 21 May 2025 09:22:25 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-05-21 09:22:25 UTC	795	IN	Data Raw: 7b 22 61 64 22 3a 7b 7d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 2c 22 69 22 3a 66 61 6c 73 65 7d 5d 7d 2c 22 64 6d 70 70 78 73 22 3a 7b 22 71 61 63 22 3a 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 22 6c 69 76 65 72 61 6d 70 22 3a 74 72 75 65 2c 22 71 75 61 6e 74 63 61 73 74 22 3a 74 72 75 65 2c 22 65 78 65 6c 61 74 65 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 5f 75 75 69 64 22 3a 22 65 5f 34 64 64 35 30 61 Data Ascii: {"ad":{},"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b&gdpr=0&gdpr_consent=","t":"i","i":false}]},"dmppxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"e_4dd50a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.9	51565	151.101.1.108	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	816	OUT	GET /v/s/244/trk.js HTTP/1.1 Host: cdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAggCCgIMMzPsbIGOAhACEgIEMzPsbIGGAc.
2024-05-21 09:22:25 UTC	600	IN	HTTP/1.1 200 OK Connection: close Content-Length: 82359 Content-Type: application/x-javascript ETag: "1cad5a6edbbf8da3391ec0f9966ccca0:1716267650.316022" Last-Modified: Tue, 21 May 2024 05:00:50 GMT Server: AkamaiNetStorage Cache-Control: max-age=31536000 Expires: Wed, 21 May 2025 05:01:56 GMT Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 15630 Date: Tue, 21 May 2024 09:22:25 GMT X-Served-By: cache-lga21941-LGA, cache-nyc-kteb1890096-NYC X-Cache: HIT, HIT X-Cache-Hits: 19, 0 X-Timer: S1716283346.549718,VS0,VE1 Vary: Accept-Encoding
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 5f 6c 6e 74 76 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 5f 6c 6e 74 76 3d 7b 7d 7d 5f 6c 6e 74 76 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 5f 72 65 28 48 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 48 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 7b 76 61 72 20 49 3d 48 2e 63 68 61 72 43 6f 64 65 41 74 28 70 29 3b 69 66 28 49 3e 3d 39 37 26 26 49 3c 3d 31 30 39 7c 7c 49 3e 3d 36 35 26 26 49 3c 3d 37 37 29 7b 49 2b 3d 31 33 7d 65 6c 73 65 7b 69 66 28 49 3e 3d 31 31 30 26 26 49 3c 3d 31 32 32 7c 7c 49 3e 3d 37 38 26 26 49 3c 3d 39 30 29 7b 49 2d 3d 31 33 7d 7d 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 49 29 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 Data Ascii: if(typeof _lntv=='undefined'){_lntv={}}_lntv.s=function(){function __re(H){var e="";for(var p=0;p<H.length;p++){var I=H.charCodeAt(p);if(I>=97&&I<=109\|\|I>=65&&I<=77){I+=13}else{if(I>=110&&I<=122\|\|I>=78&&I<=90){I-=13}}e+=String.fromCharCode(I)}return e}var
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 3a 68 7d 2c 6e 61 76 69 67 61 74 6f 72 3a 7b 75 73 65 72 41 67 65 6e 74 3a 69 7d 2c 45 72 72 6f 72 3a 7b 7d 7d 3b 68 62 2e 74 6f 70 3d 68 62 3b 68 62 2e 70 61 72 65 6e 74 3d 68 62 7d 65 6c 73 65 7b 68 62 3d 77 69 6e 64 6f 77 3b 69 62 3d 64 6f 63 75 6d 65 6e 74 7d 5f 6c 6e 74 76 2e 24 77 6e 64 3d 68 62 3b 76 61 72 20 6a 62 2c 6b 62 2c 6c 62 3d 7b 7d 2c 6d 62 3d 5b 5d 2c 6e 62 3d 5b 5d 2c 6f 62 3d 5b 5d 2c 70 62 3d 6a 2c 71 62 2c 72 62 2c 73 62 3d 6b 2c 74 62 3d 6c 3b 76 61 72 20 75 62 3d 5f 6c 6e 74 76 3b 75 62 2e 62 61 73 65 3d 73 62 3b 69 66 28 21 75 62 2e 73 63 73 29 7b 75 62 2e 73 63 73 3d 5b 5d 3b 75 62 2e 73 69 3d 6d 3b 75 62 2e 69 74 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 75 62 2e 72 71 73 3d 5b 5d 3b 75 62 2e 74 73 3d 7b Data Ascii: :h},navigator:{userAgent:i},Error:{}};hb.top=hb;hb.parent=hb}else{hb=window;ib=document}_lntv.$wnd=hb;var jb,kb,lb={},mb=[],nb=[],ob=[],pb=j,qb,rb,sb=k,tb=l;var ub=_lntv;ub.base=sb;if(!ub.scs){ub.scs=[];ub.si=m;ub.it=(new Date).getTime();ub.rqs=[];ub.ts={
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 62 2e 69 6e 64 65 78 4f 66 28 51 29 21 3d 2d 31 7c 7c 28 62 2e 69 6e 64 65 78 4f 66 28 52 29 21 3d 2d 31 7c 7c 62 2e 69 6e 64 65 78 4f 66 28 53 29 21 3d 2d 31 29 29 7b 66 3d 74 7d 65 6c 73 65 20 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 54 29 21 3d 2d 31 29 7b 66 3d 55 7d 65 6c 73 65 20 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 56 29 21 3d 2d 31 29 7b 66 3d 57 7d 65 6c 73 65 20 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 58 29 21 3d 2d 31 29 7b 66 3d 59 7d 65 6c 73 65 7b 66 3d 77 7d 5f 6c 6e 74 76 2e 75 61 3d 64 3b 5f 6c 6e 74 76 2e 70 6c 74 3d 66 3b 72 65 74 75 72 6e 20 64 7d 7d 3b 6d 62 5b 71 5d 3d 7b 27 63 68 72 6f 6d 65 35 32 27 3a 6a 2c 27 65 64 67 65 31 35 27 3a 6f 2c 27 67 65 63 6b 6f 34 30 27 3a 76 2c 27 Data Ascii: b.indexOf(Q)!=-1\|\|(b.indexOf(R)!=-1\|\|b.indexOf(S)!=-1)){f=t}else if(b.indexOf(T)!=-1){f=U}else if(b.indexOf(V)!=-1){f=W}else if(navigator.userAgent.indexOf(X)!=-1){f=Y}else{f=w}_lntv.ua=d;_lntv.plt=f;return d}};mb[q]={'chrome52':j,'edge15':o,'gecko40':v,'
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 56 69 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 6b 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 6b 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 70 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 66 28 61 2c 62 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 29 7b 61 2e 62 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 28 61 2c 62 29 7b 61 2e 63 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 67 28 61 2c 62 29 7b 61 2e 61 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 68 28 61 2c 62 29 7b 61 2e 64 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 68 28 61 2c 62 29 7b 61 2e 66 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 69 28 61 2c 62 29 7b 61 2e 69 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 42 63 28 61 29 7b 6b 63 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 42 Data Ascii: unction Vi(){}function mk(){}function tk(){}function Kp(){}function Af(a,b){}function H(a,b){a.b=b}function I(a,b){a.c=b}function Fg(a,b){a.a=b}function lh(a,b){a.d=b}function mh(a,b){a.f=b}function ni(a,b){a.i=b}function Bc(a){kc=a}function B
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 6f 6e 20 68 62 28 61 29 7b 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 70 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 54 70 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 7d 0a 66 75 6e 63 74 69 6f 6e 20 4c 70 28 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 70 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 71 7d 0a 66 75 6e 63 74 69 6f 6e 20 59 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 2a 61 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 72 65 74 75 72 6e 20 48 66 28 29 7c 7c 61 2e 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 63 28 29 7b 72 65 74 75 72 6e 20 43 28 6e 63 2e 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4d 70 28 29 7b 72 65 74 75 72 6e 20 75 Data Ascii: on hb(a){A.call(this,a)}function Qp(){return this.b}function Tp(){return this.k}function Lp(){return false}function Vp(a){return a.g.q}function Yf(a){return a.a*a.b}function C(a){return Hf()\|\|a.a}function yc(){return C(nc.c)}function Mp(){return u
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 2e 61 3d 73 6a 3b 74 68 69 73 2e 66 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 53 6a 28 29 7b 50 6a 28 74 68 69 73 29 3b 74 68 69 73 2e 72 62 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 6a 28 29 7b 5f 6a 3d 78 6e 3b 21 21 28 71 6b 28 29 2c 70 6b 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 67 28 29 7b 76 67 3d 78 6e 3b 75 67 3d 6e 65 77 20 24 66 28 35 2c 35 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 6b 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 52 6e 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 66 2b 27 5f 27 2b 61 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 76 61 72 20 62 3b 62 3d 5f 66 28 29 3b 61 2e 63 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 6e 28 64 2c 61 2c 62 29 7b 76 61 72 20 63 3d 61 3b 64 5b 63 5d 3d 62 7d Data Ascii: .a=sj;this.f=a}function Sj(){Pj(this);this.rb()}function _j(){_j=xn;!!(qk(),pk)}function vg(){vg=xn;ug=new $f(5,5)}function vk(a,b){return Rn(a,b)}function mf(a){return a.f+'_'+a.b}function J(a){var b;b=_f();a.c=b}function Gn(d,a,b){var c=a;d[c]=b}
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 20 61 2e 24 48 7c 7c 28 61 2e 24 48 3d 2b 2b 74 6f 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 28 61 29 7b 61 2e 64 3f 5a 28 61 2e 67 29 3a 24 28 61 2e 67 29 3b 4e 66 28 54 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 6a 28 29 7b 46 6a 28 29 3b 43 6a 28 28 44 62 28 29 2c 24 77 6e 64 29 29 3b 44 6a 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 57 63 28 61 2c 62 2c 63 29 7b 56 63 28 29 3b 55 63 2e 51 28 61 2c 62 2c 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 63 28 61 2c 62 2c 63 2c 64 29 7b 56 63 28 29 3b 55 63 2e 52 28 61 2c 62 2c 63 2c 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 6e 28 63 2c 61 2c 62 29 7b 63 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 6e 28 63 2c 61 29 7b 76 61 72 20 62 3d 61 3b 72 65 74 75 72 6e 20 63 5b 62 5d Data Ascii: a.$H\|\|(a.$H=++to)}function V(a){a.d?Z(a.g):$(a.g);Nf(T,a)}function Nj(){Fj();Cj((Db(),$wnd));Dj()}function Wc(a,b,c){Vc();Uc.Q(a,b,c)}function Xc(a,b,c,d){Vc();Uc.R(a,b,c,d)}function Dn(c,a,b){c.postMessage(a,b)}function Fn(c,a){var b=a;return c[b]
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 61 2c 62 29 7b 61 2e 62 3d 62 3b 62 21 3d 6e 75 6c 6c 26 26 73 6f 28 62 2c 43 70 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 63 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 38 30 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 67 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 38 38 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 37 35 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 32 30 31 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 32 30 32 29 7d 0a 66 75 6e 63 74 69 6f 6e Data Ascii: a,b){a.b=b;b!=null&&so(b,Cp,a)}function Nc(a){this.a=a;hb.call(this,180)}function Hg(a){this.a=a;hb.call(this,188)}function he(a){this.a=a;hb.call(this,175)}function Fe(a){this.a=a;hb.call(this,201)}function Ge(a){this.a=a;hb.call(this,202)}function
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 7b 76 61 72 20 62 3b 62 3d 4f 6e 28 61 29 3b 56 6e 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4d 69 28 61 29 7b 69 66 28 61 2e 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 2e 61 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 66 28 29 7b 69 66 28 6b 63 29 7b 72 65 74 75 72 6e 20 6b 63 2e 56 28 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 3b 72 65 74 75 72 6e 20 61 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 65 28 61 29 7b 61 26 26 28 55 28 29 2c 53 3d 61 2c 64 62 28 29 2c 75 6e 64 65 66 69 6e 65 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 71 6b 28 29 7b 71 6b 3d 78 6e 3b 76 61 72 20 61 3b 21 73 6b 28 29 Data Ascii: {var b;b=On(a);Vn(a,b);return b}function Mi(a){if(a.b){return a.c.a}return null}function pf(){if(kc){return kc.V()}return null}function Hn(a,b){var c=b;return a[c]!==undefined}function Ce(a){a&&(U(),S=a,db(),undefined)}function qk(){qk=xn;var a;!sk()
2024-05-21 09:22:25 UTC	1371	IN	Data Raw: 29 3b 4d 66 28 45 6a 2c 63 29 3b 6c 63 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 66 28 61 2c 62 29 7b 76 61 72 20 63 3b 63 3d 4c 66 28 61 2c 62 29 3b 63 21 3d 2d 31 26 26 61 2e 73 70 6c 69 63 65 28 63 2c 31 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 64 28 61 29 7b 76 61 72 20 62 3b 62 3d 27 27 2b 61 3b 4c 66 28 78 64 2c 62 29 21 3d 2d 31 7c 7c 4d 66 28 78 64 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 53 69 28 61 29 7b 76 61 72 20 62 3b 69 66 28 61 2e 62 29 7b 62 3d 65 6a 28 61 2e 63 29 3b 21 21 62 26 26 6b 69 28 61 2e 68 2c 36 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 48 28 61 2c 5f 66 28 29 29 3b 69 66 28 21 61 2e 61 29 7b 61 2e 61 3d 74 72 75 65 3b 49 28 61 2c 61 2e 62 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6b 6a 28 61 2c 62 29 7b 69 66 28 61 2e Data Ascii: );Mf(Ej,c);lc=a}function Nf(a,b){var c;c=Lf(a,b);c!=-1&&a.splice(c,1)}function Ad(a){var b;b=''+a;Lf(xd,b)!=-1\|\|Mf(xd,b)}function Si(a){var b;if(a.b){b=ej(a.c);!!b&&ki(a.h,6)}}function D(a){H(a,_f());if(!a.a){a.a=true;I(a,a.b)}}function kj(a,b){if(a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.9	51561	64.74.236.223	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	688	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=TZvXYgcPoPgLT8-WUnBN
2024-05-21 09:22:25 UTC	603	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 108 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=outbrain.com&id=TZvXYgcPoPgLT8-WUnBN P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=TZvXYgcPoPgLT8-WUnBN; Path=/; Domain=zemanta.com; Expires=Wed, 21 May 2025 09:22:25 GMT; Max-Age=31536000; Secure; SameSite=None Date: Tue, 21 May 2024 09:22:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-21 09:22:25 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 65 63 6d 33 3f 65 78 3d 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 26 61 6d 70 3b 69 64 3d 54 5a 76 58 59 67 63 50 6f 50 67 4c 54 38 2d 57 55 6e 42 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://aax-eu.amazon-adsystem.com/s/ecm3?ex=outbrain.com&id=TZvXYgcPoPgLT8-WUnBN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.9	51563	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	871	OUT	GET /cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&cb=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D6294%26spui%3D%26dpui%3D HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; __amc=12_1716283291_1716283340
2024-05-21 09:22:25 UTC	704	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate content-length: 0 date: Tue, 21 May 2024 09:22:24 GMT location: https://ib.adnxs.com/getuid?https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F0%2F1119%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D%26gpp_sid%3D%26us_privacy%3D%26A%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dappnexus%26cbx%3DaHR0cHM6Ly94LnNlcnZlcmJpZC5jb20vdXNlcnN5bmM_dHR0PTEmc3JjPTImY3NwaT0wJmNuPTYyOTQmc3B1aT0mZHB1aT0%253D%26uid%3D%24UID server: envoy vary: accept-encoding set-cookie: _sv3_0=1; path=/; domain=prebid.a-mo.net; expires=Wed, 22 May 2024 09:22:25 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.9	51567	2.18.96.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	3893	OUT	GET /sr/2722522032/SAFEFRAME.html?ule=3176&&kkdd=nu%7Ch%7C9uAHn3&E4=(f(7eKRRURqUjRhjeKe&)Snp=h&Ptno=h&stLn=h&ZSE=(eRR&vtZ5=cjh7&Z4S=KFWjj(jj7&ZnZS=3d.eGTDMgX1QZSIeqpUE5d%3D%3D&Zp4S=KKjRKqRRe&t4i5=RhhA7hh&ZZ=W~&tZ=bg&ZL0P=tPPXP4)pov4l0Xv5tv&n4S=KIYbe7rhR&vn4S=Ve(RRUe&Lvvnt=(&ppp=vi!2LcZ2c2n)p~W3D_GaLyB_VXf~PtK0!y)I~2nB2BT._QmtjhCIGz_!lCzB&NspM=Lvvnt%3A%2F%2FZmtvlPPonnltv5p8ZlP&5NspM=sffD3%3A~~bA3fPrr(DDP3fgc8bPr&0t5=j&s=(&m)S=U&oSv(=KFWUU3_(!&oSve=7K(e7Rqq(&TSovo=tSe%3D0m*94mpX%3Deh9E4ej%3De79l)5pnP%3Dh8j(9SlPXT%3Dh8U(9Tov%3Dh%2Ch%2C(9tZS%3D0.9po5%3Dh%2Ch%2C2(9SlPX%3Deh9EepXtS%3DeheUhje(he94mpXT%3Dqfh87R9mpXvNZ%3Dh9mpXpeoXT%3Dh9tvS%3DRehqhqU79pov%3Dh8hhh%2Ch9ZvAEepXtS%3Djhj94n%3DqLGDM9MTT%3Dh9p44nmo%3Dh%2Ch9pZ%3De%2CRqKjU9Pv4S%3DIYhhhhej9pntXtS%3DeheUhje(hU9poSE%3Dh8hhh%2Ch9mpXT%3D(8hR9EepXmpXT%3Dh9tPPXsp%3De8j7((9mpX%3Deh9tE%3D(q8(K9)Zov%3Djh(Uhe9STt4S%3DIOh(h9TT%3D(Rj9tPPXPm%3Dh8KK95pnP%3Dh8j(9EepXmpXNZ%3DhDh9nt4XZ%3Djq7ehh9TP%3D(9pN5%3Dh%2Ch%2C2(9oRnXT%3D78jq%2C(e(8Re9tS%3Dh9pXspXT%3 [TRUNCATED] Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:26 UTC	467	IN	HTTP/1.1 200 OK Content-Type: text/html timing-allow-origin: * x-sc-h: 22-2sv4 Expires: Tue, 21 May 2024 09:22:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 21 May 2024 09:22:26 GMT Content-Length: 79768 Connection: close Set-Cookie: visitor-id=3592849466404776000V10; Path=/; Domain=media.net; Max-Age=31536000; HttpOnly; Secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=31536000
2024-05-21 09:22:26 UTC	15917	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 32 73 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><script>window.l2s = Date.now();</script><style type="text/css">body{background-c
2024-05-21 09:22:26 UTC	8659	IN	Data Raw: 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 52 6f 62 6f 74 6f 2d 42 6f 6c 64 22 3b 0a 73 72 63 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 52 6f 62 6f 74 6f 2d 42 6f 6c 64 2f 52 6f 62 6f 74 6f 2d 42 6f 6c 64 2e 65 6f 74 22 29 3b 0a 73 72 63 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 52 6f 62 6f 74 6f 2d 42 6f 6c 64 2f 52 6f 62 6f 74 6f 2d 42 6f 6c 64 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 0a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 Data Ascii: {font-family: "Roboto-Bold";src: url("https://contextual.media.net/__media__/fonts/Roboto-Bold/Roboto-Bold.eot");src: url("https://contextual.media.net/__media__/fonts/Roboto-Bold/Roboto-Bold.eot?#iefix") format("embedded-opentype"),url("https://conte
2024-05-21 09:22:26 UTC	16384	IN	Data Raw: 6f 6b 73 75 3d 32 32 34 26 70 72 69 64 3d 38 50 52 56 43 58 58 31 39 26 63 69 64 3d 38 43 55 35 35 31 35 35 36 26 70 69 64 3d 38 50 4f 4e 32 36 59 30 33 26 63 72 69 64 3d 38 38 35 33 38 39 33 33 32 26 68 74 74 70 73 3d 31 26 72 6d 73 3d 31 37 31 36 32 38 33 33 34 36 26 73 69 7a 65 3d 33 30 30 78 36 30 30 26 6b 73 75 3d 32 32 34 26 75 67 64 3d 34 26 74 73 69 64 3d 31 38 26 61 73 6e 3d 33 33 35 36 26 72 61 64 65 70 74 68 3d 30 26 6b 77 65 70 3d 51 34 55 35 50 46 62 54 25 32 36 55 25 32 46 4a 50 47 48 62 47 45 47 25 32 36 55 25 32 46 4a 47 50 62 25 32 35 54 65 31 4a 35 4e 25 32 35 46 49 62 2e 62 45 74 25 32 35 54 65 55 33 39 25 32 35 46 49 62 2e 45 62 48 47 25 32 35 54 65 55 33 4a 39 25 32 35 46 49 62 2e 46 46 47 45 25 32 35 54 65 55 4a 33 4a 39 25 32 35 46 Data Ascii: oksu=224&prid=8PRVCXX19&cid=8CU551556&pid=8PON26Y03&crid=885389332&https=1&rms=1716283346&size=300x600&ksu=224&ugd=4&tsid=18&asn=3356&radepth=0&kwep=Q4U5PFbT%26U%2FJPGHbGEG%26U%2FJGPb%25Te1J5N%25FIb.bEt%25TeU39%25FIb.EbHG%25TeU3J9%25FIb.FFGE%25TeUJ3J9%25F
2024-05-21 09:22:26 UTC	8192	IN	Data Raw: 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 29 7b 74 72 79 7b 76 61 72 20 65 3b 69 66 28 6f 2e 24 33 72 28 6e 29 29 72 65 74 75 72 6e 20 65 3d 74 2e 64 6f 63 75 6d 65 6e 74 2c 74 5b 22 69 6e 6e 65 72 22 2b 6e 5d 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 5b 22 63 6c 69 65 6e 74 22 2b 6e 5d 7c 7c 65 2e 62 6f 64 79 26 26 65 2e 62 6f 64 79 5b 22 63 6c 69 65 6e 74 22 2b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 2c 22 57 69 64 74 68 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 2c 22 48 65 69 67 68 74 22 Data Ascii: }catch(t){}return!0}function n(t,n){try{var e;if(o.$3r(n))return e=t.document,t["inner"+n]\|\|e.documentElement&&e.documentElement["client"+n]\|\|e.body&&e.body["client"+n]}catch(t){}return""}function i(t){return n(t,"Width")}function c(t){return n(t,"Height"
2024-05-21 09:22:26 UTC	16384	IN	Data Raw: 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 63 6c 29 29 3a 7b 7d 2c 73 3d 65 2e 61 63 6c 70 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 61 63 6c 70 29 29 3a 7b 7d 2c 75 3d 65 2e 61 63 6c 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 61 63 6c 29 29 3a 7b 7d 2c 69 3d 65 2e 6c 70 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 6c 70 29 29 3a 7b 7d 7d 7d 7d 29 3b 24 30 30 28 22 6c 6f 63 68 61 73 68 75 74 69 6c 22 2c 5b 22 75 74 69 6c 22 2c 22 6d 65 74 61 70 61 72 61 6d 75 74 69 6c 22 2c 22 63 6f 6d 6d 6f 6e 63 6f 6e 73 74 61 6e 74 73 22 2c 22 72 74 62 73 64 61 74 61 75 74 69 6c 22 2c 22 Data Ascii: ecodeURIComponent(e.cl)):{},s=e.aclp?JSON.parse(decodeURIComponent(e.aclp)):{},u=e.acl?JSON.parse(decodeURIComponent(e.acl)):{},i=e.lp?JSON.parse(decodeURIComponent(e.lp)):{}}}});$00("lochashutil",["util","metaparamutil","commonconstants","rtbsdatautil","
2024-05-21 09:22:26 UTC	8192	IN	Data Raw: 32 36 28 22 6e 72 72 73 22 2c 22 36 35 39 33 22 2c 7b 76 67 64 3a 21 30 7d 29 2e 24 32 36 28 22 63 6e 74 72 64 74 22 2c 50 2e 24 31 4f 28 22 63 6e 74 72 64 74 22 29 2c 7b 76 67 64 3a 21 30 7d 29 2e 24 32 36 28 22 63 72 65 66 75 72 6c 22 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 2e 24 31 62 28 22 63 72 65 66 22 29 29 2c 7b 76 67 64 3a 21 30 7d 29 2e 24 32 36 28 22 6c 70 75 61 22 2c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 7b 76 67 64 3a 21 30 2c 24 32 42 3a 66 2e 6d 69 73 63 26 26 31 3d 3d 3d 66 2e 6d 69 73 63 2e 6c 70 75 61 7d 29 2e 24 32 36 28 22 63 6c 6b 49 64 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 50 2e 24 31 4f 28 22 63 6c 6b 49 64 51 73 22 29 29 2c 7b 76 67 64 3a 21 Data Ascii: 26("nrrs","6593",{vgd:!0}).$26("cntrdt",P.$1O("cntrdt"),{vgd:!0}).$26("crefurl",decodeURIComponent(u.$1b("cref")),{vgd:!0}).$26("lpua",window.navigator.userAgent,{vgd:!0,$2B:f.misc&&1===f.misc.lpua}).$26("clkId",encodeURIComponent(P.$1O("clkIdQs")),{vgd:!
2024-05-21 09:22:26 UTC	6040	IN	Data Raw: 65 53 63 72 65 65 6e 3a 6c 2c 6f 70 74 69 6f 6e 73 53 63 72 65 65 6e 3a 61 2c 24 32 48 3a 64 2c 24 32 49 3a 6d 2c 66 69 72 65 55 6e 48 69 64 65 41 64 4c 6f 67 67 69 6e 67 50 69 78 65 6c 3a 24 2c 76 61 6c 69 64 61 74 65 53 65 6c 65 63 74 69 6f 6e 3a 76 2c 74 72 69 67 67 65 72 53 68 6f 77 41 64 45 76 65 6e 74 3a 79 2c 73 63 72 65 65 6e 4f 70 74 69 6f 6e 73 43 68 61 6e 67 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 28 67 28 29 3f 28 6e 2e 24 33 53 28 61 2c 22 73 63 72 5f 6f 70 74 69 6f 6e 73 5f 61 63 74 69 76 65 22 29 2c 70 29 3a 28 6e 2e 24 33 54 28 61 2c 22 73 63 72 5f 6f 70 74 69 6f 6e 73 5f 61 63 74 69 76 65 22 29 2c 5f 29 29 28 6d 29 7d 2c 73 68 6f 77 4f 70 74 69 6f 6e 73 53 63 72 65 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 28 6c 29 2c 70 28 61 29 2c Data Ascii: eScreen:l,optionsScreen:a,$2H:d,$2I:m,fireUnHideAdLoggingPixel:$,validateSelection:v,triggerShowAdEvent:y,screenOptionsChanged:function(){(g()?(n.$3S(a,"scr_options_active"),p):(n.$3T(a,"scr_options_active"),_))(m)},showOptionsScreen:function(){_(l),p(a),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.9	51566	2.18.96.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:25 UTC	972	OUT	GET /checksync.php?vsSync=1&cs=10&cv=31&https=1&cid=8CU44QH1R&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=APPNEXUS_EXPERIMENT&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://255ce87087a85b0081c4eb0038ea1125.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:26 UTC	537	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 27410 Content-Type: text/html; charset=UTF-8 Set-Cookie: visitor-id=3592849466404713000V10; Expires=Wed, 21 May 2025 09:22:26 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Thu, 23 May 2024 09:22:26 GMT Date: Tue, 21 May 2024 09:22:26 GMT Connection: close
2024-05-21 09:22:26 UTC	215	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 35 33 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"
2024-05-21 09:22:26 UTC	16384	IN	Data Raw: 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 65 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 31 30 22 2c 22 6c 6f 6f 6b 75 70 22 3a 7b 22 67 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 22 2c 22 74 69 6d 65 22 3a 31 34 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 2d 67 22 2c 22 75 72 6c 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 67 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 5c 2f 70 69 78 65 6c 3f 63 73 3d 31 30 26 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6d 65 64 69 61 26 67 6f 6f 67 6c 65 5f 63 6d 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 3c 65 6e 63 62 36 34 76 73 69 64 3e 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 Data Ascii: US","zone":"e","coc":"NA"},"cs":"10","lookup":{"g":{"name":"g","time":14,"cookie":"data-g","urls":[{"type":"img","url":"https:\/\/cm.g.doubleclick.net\/pixel?cs=10&google_nid=media&google_cm=1&google_hm=<encb64vsid>&google_sc=1&gdpr=${GDPR}&gdpr_consent=$
2024-05-21 09:22:26 UTC	8192	IN	Data Raw: 73 2e 67 64 70 72 3d 6e 2e 67 65 74 47 44 50 52 46 6c 61 67 28 29 3f 31 3a 30 2c 73 2e 63 73 65 78 3d 6e 2e 67 65 74 47 44 50 52 43 6f 6e 73 65 6e 74 28 29 7c 7c 30 2c 73 2e 63 73 73 74 72 3d 61 28 29 2c 73 2e 75 73 70 5f 73 74 61 74 75 73 3d 6e 2e 67 65 74 43 63 70 61 46 6c 61 67 28 29 3f 31 3a 30 2c 73 2e 75 73 63 3d 6e 2e 67 65 74 43 63 70 61 43 6f 6e 73 65 6e 74 28 29 7c 7c 30 2c 73 2e 76 73 69 64 3d 6e 2e 67 65 74 56 69 73 69 74 6f 72 49 64 28 29 7c 7c 22 22 2c 73 2e 6c 70 65 72 3d 6e 2e 73 68 6f 75 6c 64 46 61 69 6c 6f 76 65 72 28 29 3f 6e 2e 67 65 74 46 61 69 6c 75 72 65 4c 70 65 72 28 29 3a 6e 2e 67 65 74 53 75 63 63 65 73 73 4c 70 65 72 28 29 2c 73 2e 74 72 3d 31 65 33 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 73 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: s.gdpr=n.getGDPRFlag()?1:0,s.csex=n.getGDPRConsent()\|\|0,s.csstr=a(),s.usp_status=n.getCcpaFlag()?1:0,s.usc=n.getCcpaConsent()\|\|0,s.vsid=n.getVisitorId()\|\|"",s.lper=n.shouldFailover()?n.getFailureLper():n.getSuccessLper(),s.tr=1e3*Math.random(),s)}function
2024-05-21 09:22:26 UTC	2619	IN	Data Raw: 6f 64 69 63 53 79 6e 63 3a 61 2c 73 74 61 72 74 50 65 72 69 6f 64 69 63 53 79 6e 63 3a 75 7d 7d 29 3b 5f 63 44 28 22 6d 6e 73 79 6e 63 22 2c 5b 77 69 6e 64 6f 77 2c 77 69 6e 64 6f 77 2e 5f 6d 4e 43 6b 2e 75 74 69 6c 2c 22 65 6d 22 2c 22 76 69 73 69 74 6f 72 63 6b 73 79 6e 63 22 2c 22 63 6b 73 79 6e 63 22 2c 22 72 65 73 22 2c 22 6e 65 78 74 73 65 72 76 69 63 65 22 2c 22 64 72 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 2c 74 2c 6e 2c 72 2c 73 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 69 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 43 68 65 63 6b 53 79 6e 63 55 72 6c 28 22 68 62 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 65 2e 70 61 Data Ascii: odicSync:a,startPeriodicSync:u}});_cD("mnsync",[window,window._mNCk.util,"em","visitorcksync","cksync","res","nextservice","drs"],function(e,i,o,t,n,r,s,c){"use strict";function u(){return"1"===i.getQueryParamValueFromCheckSyncUrl("hb")}function a(t){e.pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.9	51562	142.250.184.193	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:26 UTC	859	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 1890c53250268d65cfe709175e182771.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:26 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 21 May 2024 09:22:26 GMT Expires: Wed, 21 May 2025 09:22:26 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:26 UTC	683	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-05-21 09:22:26 UTC	1390	IN	Data Raw: 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 61 28 61 29 7d 3b 76 61 72 20 65 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 65 61 3f 61 3a 22 22 7d 3b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: urn t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(
2024-05-21 09:22:26 UTC	1390	IN	Data Raw: 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 3d 64 7c 7c 30 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6b 3d 5b 5d 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 6b 2e 70 75 73 68 28 70 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 71 61 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e Data Ascii: .split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(Strin
2024-05-21 09:22:26 UTC	1390	IN	Data Raw: 3b 28 7b 7d 29 5b 33 5d 3d 64 61 28 70 28 6e 65 77 20 6e 28 6c 2c 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 61 64 73 2f 72 69 63 68 6d 65 64 69 61 2f 73 74 75 64 69 6f 5f 63 61 6e 61 72 79 2f 6d 75 2f 74 65 6d 70 6c 61 74 65 73 2f 68 69 66 69 2f 68 69 66 69 5f 63 61 6e 61 72 79 2e 6a 73 22 29 29 29 3b 76 61 72 20 75 61 3d 2f 5e 28 5b 5e 3b 5d 2b 29 3b 28 5c 64 2b 29 3b 28 5b 5c 73 5c 53 5d 2a 29 24 2f 3b 76 61 72 20 76 61 3d 2f 5e 28 5b 61 2d 7a 30 2d 39 5d 28 5b 61 2d 7a 30 2d 39 2d 5d 7b 30 2c 36 31 7d 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 73 61 66 65 66 72 61 6d 65 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 74 70 63 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 73 65 63 75 Data Ascii: ;({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S]*)$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secu
2024-05-21 09:22:26 UTC	1309	IN	Data Raw: 74 22 2c 35 30 37 29 3b 76 2e 65 72 72 6f 72 26 26 76 2e 6d 65 74 61 26 26 76 2e 69 64 7c 7c 28 76 3d 6e 65 77 20 68 61 29 3b 69 66 28 76 2e 6d 73 67 29 7b 76 61 72 20 43 61 3d 76 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 49 2e 67 2e 70 75 73 68 28 32 29 3b 49 2e 68 5b 32 5d 3d 7a 28 22 6d 73 67 22 2c 43 61 29 7d 76 61 72 20 44 61 3d 5b 76 2e 6d 65 74 61 7c 7c 7b 7d 5d 3b 49 2e 67 2e 70 75 73 68 28 33 29 3b 49 2e 68 5b 33 5d 3d 44 61 3b 76 61 72 20 4a 3d 66 2c 4b 3d 5b 5d 2c 4c 2c 4d 3d 6e 75 6c 6c 2c 4e 3b 64 6f 7b 4e 3d 4a 3b 76 61 72 20 50 3b 74 72 79 7b 76 61 72 20 51 3b 69 66 28 51 3d 21 21 4e 26 26 6e 75 6c 6c 21 3d 4e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 77 28 4e 2e 66 6f 6f 29 3b 51 3d 21 30 3b Data Ascii: t",507);v.error&&v.meta&&v.id\|\|(v=new ha);if(v.msg){var Ca=v.msg.substring(0,512);I.g.push(2);I.h[2]=z("msg",Ca)}var Da=[v.meta\|\|{}];I.g.push(3);I.h[3]=Da;var J=f,K=[],L,M=null,N;do{N=J;var P;try{var Q;if(Q=!!N&&null!=N.location.href)b:{try{w(N.foo);Q=!0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.9	51578	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:26 UTC	1332	OUT	GET /hbx/bwin?_e=CvkDCgRid2luIgtfb3lha3RwZXBoeTE5HlzPSlnlPzoIYXBwbmV4dXNCBTEwMDQ4ShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OGoTY3VzdG9tbWFwcG9zdGVyLmNvbXgBigEIZThkOGU0MDKgAVqoAdgFwAGY-QvIAQDQAQPoAQDyAQ8xMTY2NjYzMzI1MzQ4OTGYAo80qQIAAAAAAAAAALICDGFpcmZyYW5jZS51c7oCCTUwMDc0MDk5MsICBDI2NDGaAyBjMGM0MmU3YTUwOTI0NThlODQyZTdhNTA5MjU1OGU2M6IDE1kyOXVjM1Z0WVdKc1pTNWpiMjCoAzTCAwEw4APtkAHqAyA5ZWJjYzNhMjE3NTMxMWVmYTM4YjQyMzZkNGE3YmE0OKIEKmh0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9zZWFyY2gtYXJ0aWNsZaoEA0lTUIoFATGyBQNVU0TSBQkxMDUxOTk1NzfYBQDgBQHqBQdkZXNrdG9w8gUNNEE3TDMzTUw3SlY5Q_oFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&np=0.66714993 HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:22:26 UTC	156	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:26 GMT Connection: close cache-control: max-age=0, private, must-revalidate server: MonetEngine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.9	51577	147.182.216.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:26 UTC	1245	OUT	GET /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=wxX13Vswd8pQWAJ4F1LVEHBUoEPzIzORZ8anRFRFNZRmM1cXtVJQdiQUBQDEhnMXh6AHETelFBVl5FZm8gcgwjUjNBQVcNEmduIHoHcAR0X1VSC0cwYXF6B3dQNUVDVg9EZW93LAx%2FAWdRW0YOQ2Y2d3sHfgJlQ0BTDUhjZHJ7UX8HN0VVSBpGYmAgfAQlV2IQQwIKEWA1dnxXcQQ0RUFGFFJnZHYrAX4AbkIWBw5EY2B1fgxwV2UWEVcaXHNhcn1VcAAwR0YFW0ZlZXZ%2BAH4HMEsSBlpSfXV3eQQgBWRBE1YPRjU1IywDfgVjEBVdABJze2N8B3VSYUUSUg9EZ2JwfQMnUm4VEwYBFWB1bWgCdQY3RhICCUQyYyd4VXdTYUUUUw1EN2FjZhZwAjIVE1YNQmRjI31VJFNmQRFVDUNnYndoGGQHZUQTVAlEZm4ieQJ0A2dEFAVbEWlnIH0WahNgQEAFDkNlM3UpACADN0IVUw4TZmFwLgxkHXRFRFNZRTdidXtVJQdiQUBQDEhnMXl4BHATelFBVw8RZDEjKQd1AWFEQlwKQ2JmJHMCfgd0X1VSC0cwYXNyUXdQNUVDVg9EZW93LA12BWRRKkgaEz4iLz4WfAF6URAASAJzbTo3GGRCMwAEDVcec21jflcgBWMXFlYVQjUyJWcEdlUyXkEGCxV8MiVzAHdVNUZOXAxEc3tjKVsoXzMQAw1XHhgzY3AWcAQ0QUZVARU3Nnd5ViVTYhJAVFxFaTUjaEk%3D
2024-05-21 09:22:26 UTC	372	IN	HTTP/1.1 204 No Content access-control-allow-origin: * cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control date: Tue, 21 May 2024 09:22:26 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.9	51586	172.217.16.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:27 UTC	1051	OUT	GET /f/AGSKWxWTMajZ8wsJUxxk2ieL2lxKfePL2CnMV1Ey1BF_YvpvjiczO4eUmfyqkBnAhxggfBVpUQewLx82-bng_kWuA5Zj29QGYVfCMWvxDs10PpWgBLJaHDglJIiyiG_gprkx6JZOv377gw==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzE2MjgzMzQzLDU2MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuIl0sImh0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9hcnRpY2xlL3RvcC85MjYiLG51bGwsW1s4LCJ3U25MWjczYVpBOCJdLFs5LCJlbi1VUyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:27 UTC	1931	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 21 May 2024 09:22:27 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-2C9pSMhpz1UtimbGQCqHsg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjKtDikmLw05BiOO90h-k6EBtoPGeyAGKJry-ZtIA45vl01hQgdkqfwRoCxD71M1jjgLj15jnW6UCc9O88awkQ71x8gfUgEK86coF1ExC3f77AOhOIv7NfZP0PxOWOF1nrgViIh-Py-Y2b2AQ-zH43iVFJIym_MD45P6-kKDOptCS_KC05LbU4tagstSjeyMDIxMDU0FLPwDy-wAAA6GxHIw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-21 09:22:27 UTC	1931	IN	Data Raw: 32 39 61 39 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 54 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5f 2e 66 63 2e 61 70 70 6c 79 28 31 2c Data Ascii: 29a9if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Tn=function(a){for(var b=_.fc.apply(1,
2024-05-21 09:22:27 UTC	1931	IN	Data Raw: 73 65 6e 74 52 65 76 6f 63 61 74 69 6f 6e 43 6c 6f 73 65 54 65 78 74 28 29 2c 66 3d 74 68 69 73 2e 67 2e 67 65 74 44 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 52 65 76 6f 63 61 74 69 6f 6e 41 74 74 65 73 74 61 74 69 6f 6e 54 65 78 74 28 29 2c 67 3d 74 68 69 73 2e 6f 3b 5f 2e 4d 6e 28 63 2c 30 2c 30 29 3b 5f 2e 4c 6e 28 63 2c 61 2c 64 2c 65 2c 66 2c 67 29 3b 62 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 7d 63 3d 5f 2e 4a 63 28 5f 2e 72 6e 28 6e 75 6c 6c 21 3d 28 65 3d 6e 75 6c 6c 3d 3d 28 64 3d 5f 2e 49 6b 28 74 68 69 73 2e 67 29 29 3f 76 6f 69 64 20 30 3a 5f 2e 44 62 28 64 29 29 3f 65 3a 6e 65 77 20 5f 2e 49 63 2c 61 29 2c 36 29 3b 28 61 3d 28 61 3d 5f 2e 77 66 28 74 68 69 73 2e 75 2e 64 6f 63 75 6d 65 6e 74 29 29 26 26 6e 75 6c 6c 21 3d 5f 2e 48 63 28 61 2c 32 Data Ascii: sentRevocationCloseText(),f=this.g.getDefaultConsentRevocationAttestationText(),g=this.o;_.Mn(c,0,0);_.Ln(c,a,d,e,f,g);b(null);return}c=_.Jc(_.rn(null!=(e=null==(d=_.Ik(this.g))?void 0:_.Db(d))?e:new _.Ic,a),6);(a=(a=_.wf(this.u.document))&&null!=_.Hc(a,2
2024-05-21 09:22:27 UTC	1931	IN	Data Raw: 2e 75 3d 63 3b 5f 2e 72 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 6f 28 61 29 7d 2c 61 2e 6a 29 7d 3b 76 61 72 20 42 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 29 3b 74 68 69 73 2e 6f 3d 63 3b 74 68 69 73 2e 6a 3d 6e 65 77 20 79 6f 28 61 2c 62 29 7d 3b 5f 2e 41 28 42 6f 2c 72 6f 29 3b 42 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 7d 3b 42 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 62 3d 43 6f 28 74 68 69 73 29 3b 61 6f 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6a 2e 69 2e 70 75 73 68 28 62 29 3b 41 6f 28 61 2e 6a 2c 66 75 6e 63 74 Data Ascii: .u=c;_.r.setTimeout(function(){zo(a)},a.j)};var Bo=function(a,b,c,d,e){ro.call(this,d,e);this.o=c;this.j=new yo(a,b)};_.A(Bo,ro);Bo.prototype.g=function(){return 0};Bo.prototype.i=function(){var a=this,b=Co(this);ao(b,function(){a.j.i.push(b);Ao(a.j,funct
2024-05-21 09:22:27 UTC	1931	IN	Data Raw: 5f 2e 75 64 2c 32 29 29 2c 58 6e 28 5f 2e 44 28 61 2e 67 2c 0a 6a 6f 2c 33 29 29 2c 61 2e 69 2c 61 2e 6a 29 3b 61 3d 5b 62 2c 63 2c 64 5d 3b 66 70 28 61 29 3b 72 65 74 75 72 6e 7b 56 62 3a 61 2c 78 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 30 3d 3d 3d 66 7c 7c 32 3d 3d 3d 66 29 63 2e 69 28 29 2c 64 2e 69 28 29 7d 29 3b 62 2e 69 28 29 7d 7d 7d 3b 62 70 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4a 53 4f 4e 29 69 66 28 5f 2e 72 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 29 7b 6d 6f 28 74 68 69 73 2e 69 29 3b 76 61 72 20 62 3d 21 30 7d 65 6c 73 65 20 62 3d 21 31 3b 65 6c 73 65 20 6d 6f 28 74 68 69 73 2e 69 29 2c 62 3d 21 30 3b Data Ascii: _.ud,2)),Xn(_.D(a.g,jo,3)),a.i,a.j);a=[b,c,d];fp(a);return{Vb:a,xc:function(){b.addListener(function(e,f){if(0===f\|\|2===f)c.i(),d.i()});b.i()}}};bp.prototype.run=function(a){if(JSON)if(_.r.frameElement){mo(this.i);var b=!0}else b=!1;else mo(this.i),b=!0;
2024-05-21 09:22:27 UTC	1931	IN	Data Raw: 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 2e 65 6e 5f 55 53 2e 77 53 6e 4c 5a 37 33 61 5a 41 38 2e 65 73 35 2e 4f 2f 64 3d 31 2f 65 78 6d 3d 6b 65 72 6e 65 6c 5f 6c 6f 61 64 65 72 2c 6c 6f 61 64 65 72 5f 6a 73 5f 65 78 65 63 75 74 61 62 6c 65 2c 77 65 62 5f 69 61 62 5f 74 63 66 5f 76 32 5f 73 69 67 6e 61 6c 5f 65 78 65 63 75 74 61 62 6c 65 2f 65 64 3d 31 2f 72 73 3d 41 4a 6c 63 4a 4d 79 4e 4a 34 6c 7a 73 59 64 34 42 37 5f 5f 5a 59 56 68 36 64 5f 32 6d 77 35 64 71 51 2f 6d 3d 61 64 5f 62 6c 6f 63 6b 69 6e 67 5f 64 65 74 65 63 74 69 6f 6e 5f 65 78 65 63 75 74 61 62 6c 65 0a 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 33 2c Data Ascii: ributorServingResponseClientJs.en_US.wSnLZ73aZA8.es5.O/d=1/exm=kernel_loader,loader_js_executable,web_iab_tcf_v2_signal_executable/ed=1/rs=AJlcJMyNJ4lzsYd4B7__ZYVh6d_2mw5dqQ/m=ad_blocking_detection_executable__googlefc.fcKernelManager.run('\x5b\x5b\x5b3,
2024-05-21 09:22:27 UTC	1018	IN	Data Raw: 30 63 48 4d 36 4c 79 39 6d 64 57 35 6b 61 57 35 6e 59 32 68 76 61 57 4e 6c 63 32 31 6c 63 33 4e 68 5a 32 56 7a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 76 5a 69 39 42 52 31 4e 4c 56 33 68 57 4e 6e 55 7a 54 6a 59 7a 52 54 68 58 54 57 74 6a 61 58 5a 32 54 56 5a 6d 4e 55 4e 48 55 31 56 79 65 43 31 69 53 69 31 6b 53 31 56 30 61 30 46 57 4e 33 5a 66 52 47 35 31 4e 6c 5a 53 4d 30 31 43 4d 45 4d 34 53 45 70 6c 5a 56 41 35 4d 32 6f 78 62 31 39 72 59 6d 46 6d 61 6d 46 54 57 56 52 49 52 58 70 7a 4f 58 4e 4e 53 44 42 50 52 46 64 59 59 56 39 6a 4c 55 31 56 64 55 38 79 62 57 6c 51 64 45 4e 76 56 6d 35 77 52 7a 68 6c 51 30 56 52 53 7a 55 34 4e 56 56 31 53 57 35 55 55 30 70 50 4e 33 56 35 65 57 39 30 65 48 70 75 62 6b 31 47 59 6e 64 33 58 48 55 77 4d 44 4e 6b 58 48 Data Ascii: 0cHM6Ly9mdW5kaW5nY2hvaWNlc21lc3NhZ2VzLmdvb2dsZS5jb20vZi9BR1NLV3hWNnUzTjYzRThXTWtjaXZ2TVZmNUNHU1VyeC1iSi1kS1V0a0FWN3ZfRG51NlZSM01CMEM4SEplZVA5M2oxb19rYmFmamFTWVRIRXpzOXNNSDBPRFdYYV9jLU1VdU8ybWlQdENvVm5wRzhlQ0VRSzU4NVV1SW5UU0pPN3V5eW90eHpubk1GYnd3XHUwMDNkXH
2024-05-21 09:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.9	51585	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:27 UTC	571	OUT	GET /main/js/deflate.min.js HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:22:27 UTC	469	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12823 Connection: close server: nginx date: Tue, 21 May 2024 09:22:26 GMT last-modified: Tue, 15 Aug 2023 09:50:08 GMT etag: "64db4a50-3217" accept-ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 ca8cb14c76df16342491237cea8cfed6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ra445MPmGzWJNQO8nwWT8VnTr-QtMf4MJr1Fu-RildY4ziu4W8S8wg==
2024-05-21 09:22:27 UTC	12823	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 7a 6c 69 62 2e 6a 73 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 5a 6c 69 62 20 4c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6d 61 79 61 2f 7a 6c 69 62 2e 6a 73 0a 20 2a 0a 20 2a 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 69 6d 61 79 61 0a 20 2a 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 2a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 Data Ascii: /** * @license * zlib.js * JavaScript Zlib Library * https://github.com/imaya/zlib.js * * The MIT License * * Copyright (c) 2012 imaya * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and assoc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.9	51584	13.32.99.104	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:27 UTC	584	OUT	GET /content/omid/static/omweb-v1.min.js HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: csuuid=664c679d515d1
2024-05-21 09:22:27 UTC	469	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 39996 Connection: close server: nginx date: Tue, 21 May 2024 09:22:26 GMT last-modified: Mon, 07 Aug 2023 08:33:05 GMT etag: "64d0ac41-9c3c" accept-ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 3296b04068551f925d5fafd1b785ff30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Q_fdVwwMLNTz79PXjHrbIBV54WHLF90DbEvQpir8vI06sC2D5W7JrQ==
2024-05-21 09:22:27 UTC	16384	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 6f 6d 69 64 47 6c 6f 62 61 6c 29 20 7b 0a 20 20 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 27 6e 75 6d 62 65 72 27 3d 3d 74 79 70 65 6f 66 20 61 2e 6c Data Ascii: ;(function(omidGlobal) { var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.l
2024-05-21 09:22:27 UTC	16384	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 62 29 7b 62 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 57 61 28 61 2c 58 61 28 61 2c 59 61 28 61 2c 7b 63 6f 6e 74 65 78 74 3a 62 7d 29 2c 21 30 29 29 2c 7b 73 75 70 70 6f 72 74 73 4c 6f 61 64 65 64 45 76 65 6e 74 3a 21 21 61 2e 67 2e 68 7c 7c 27 76 69 64 65 6f 27 3d 3d 61 2e 67 2e 67 7d 29 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 2c 7b 70 61 67 65 55 72 6c 3a 47 61 28 29 2c 63 6f 6e 74 65 6e 74 55 72 6c 3a 61 2e 67 2e 76 7d 29 3b 76 61 72 20 63 3d 51 28 61 2c 27 73 65 73 73 69 6f 6e 53 74 61 72 74 27 2c 27 6e 61 74 69 76 65 27 2c 62 29 3b 61 2e 68 2e 70 75 73 68 28 63 29 3b 61 2e 6c 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 53 61 28 63 29 3b 54 61 28 61 2c 65 2c 64 29 3b Data Ascii: void 0!==b){b=Object.assign({},Wa(a,Xa(a,Ya(a,{context:b}),!0)),{supportsLoadedEvent:!!a.g.h\|\|'video'==a.g.g});Object.assign(b,{pageUrl:Ga(),contentUrl:a.g.v});var c=Q(a,'sessionStart','native',b);a.h.push(c);a.l.forEach(function(d){var e=Sa(c);Ta(a,e,d);
2024-05-21 09:22:27 UTC	7228	IN	Data Raw: 28 63 29 3a 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6c 2e 67 3d 74 68 69 73 2e 6d 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 68 26 26 28 74 68 69 73 2e 68 2e 67 3d 74 68 69 73 2e 6f 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 74 68 69 73 2e 73 3d 6e 65 77 20 43 62 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 74 72 79 7b 54 62 28 62 2c 64 2c 65 2c 66 29 7d 63 61 74 63 68 28 6b 29 7b 4f 28 55 62 28 6b 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 62 2e 6a 3d 46 61 28 64 29 3f 64 3a 51 62 3b 76 61 72 20 65 3d 47 62 28 29 3b 62 2e 68 2e 68 28 6e 65 77 20 56 28 65 2c 27 69 64 65 6e 74 69 66 79 53 65 72 76 69 63 65 57 69 6e 64 6f 77 27 2c 27 31 2e 34 2e 36 2d 69 61 62 34 30 33 36 27 29 2c 64 29 7d 29 3b 45 62 28 74 68 69 Data Ascii: (c):null;this.j=null;this.l.g=this.m.bind(this);this.h&&(this.h.g=this.o.bind(this));this.s=new Cb(function(d,e,f){try{Tb(b,d,e,f)}catch(k){O(Ub(k))}},function(d){b.j=Fa(d)?d:Qb;var e=Gb();b.h.h(new V(e,'identifyServiceWindow','1.4.6-iab4036'),d)});Eb(thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.9	51588	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:28 UTC	1490	OUT	GET /static-res/img/search.svg?id=b28071f3b9c4778b36f1 HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283337.0.0.0 If-Modified-Since: Tue, 21 May 2024 09:08:10 GMT
2024-05-21 09:22:28 UTC	570	IN	HTTP/1.1 304 Not Modified Date: Tue, 21 May 2024 09:22:28 GMT Connection: close Last-Modified: Tue, 21 May 2024 09:08:10 GMT CF-Cache-Status: HIT Age: 858 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FBkBsmXf5h5hbO7YpBhst%2FTObkInaJCz2WhqmObuqHPugRTYavcZPIBBFaMZsbFyO5lte60WCQexdfW5ZFKPdP9VKQmDVQ4qhpzcoydOYDMBFD%2Bi5E9r3rObLEDnzh0P%2B4R7Utno"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8873808efcb0c3eb-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.9	51589	159.223.96.127	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:28 UTC	1373	OUT	GET /api/cookie?partnerId=sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=dFf142JDhjx0i4Z0GeISWg0CRgMXgxGKRJ9PmsHLHddWR0CUVBtBHNUKgJ6dV8OG1VeVzgSa0d%2FAX0hWVhKAlgMa1UlB3hWeXFdXhoBCwN4HGVQLwEvcFhSQVMLA21RcVV5A30nC15NVF0WdhJyA3oHeSEOXBwHXQBrU3dVeAUuJw1dG1RLGHgGc1J%2FAnJ0XQgeBVgGOwckA3AEfHRbX0kSRRZsA3VUKwJzcl9bSQhdAWJTdlx4BitxXV9aHEsCaQQiXHECfiYKWRtUX1c%2FVHVVKgF9cQpIVBJfBjxVclIqUC4iX1gcBFwHYgF0UXwDeiVKRloGXAE8BH9QegR6cglbGQJeDD4EcAR5BnNmNUZaUwZBNERlX3keaCMMGgoSU094WTQgHBBwIgkGC1VFFj1UNxdrCGh0SkZaVw1EKHMoCzpXJDBKUFoSRRYvQxcXIEQrJxFIQhJLSXYSNAA6QSMrBkhCEl9QagRyBHELZyBdCUkdXgdjVWoAcQsuaVpcQVMIAzhWcV0tBmhoSgkXXgdROUQuCid7LmZSSE4DXlFsBXNTLVcpJlBYHARcBmkGIVUvCmhoSgMLeQ9GO10iR3NGODENFw%3D%3D
2024-05-21 09:22:28 UTC	575	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; Domain=.cootlogix.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:28 GMT; Secure; SameSite=None content-type: image/avif content-length: 43 date: Tue, 21 May 2024 09:22:28 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.9	51590	34.98.64.218	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:28 UTC	929	OUT	GET /w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dopenx%26userId%3D%7BOPENX_ID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:28 UTC	617	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321; Version=1; Expires=Wed, 21-May-2025 09:22:28 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://sync.cootlogix.com/api/cookie?partnerId=openx&userId=222365c9-4326-4b26-b3a0-903d38fd8936&gdpr=0&gdpr_consent=&us_privacy= Date: Tue, 21 May 2024 09:22:28 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.9	51587	52.94.223.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:28 UTC	649	OUT	GET /s/ecm3?ex=outbrain.com&id=TZvXYgcPoPgLT8-WUnBN HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:28 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: JGKP7M115EE0XG34Z770 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.9	51591	37.252.171.52	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:28 UTC	1051	OUT	GET /getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cba2049f505b2d944b6%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; uuid2=6403784576581203868; icu=ChkI__eVARAKGAggCCgIMMzPsbIGOAhACEgIEMzPsbIGGAc.
2024-05-21 09:22:28 UTC	1555	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://visitor.omnitagjs.com/visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=6403784576581203868&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 5d3f01e0-4a6e-4057-926e-e66864aba65b Set-Cookie: XANDR_PANID=-FB5v9mDlYGgpgX8Vhl4U5A8DSGpoYI7dtTLTufsjlAbrmMH7ievof0VAh5GsTQq42O4QUQbuTWmeePZhK4AcVh-wohWaOotAcSb4b7KrWg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:28 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:28 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:28 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.9	51129	46.51.168.169	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:29 UTC	537	OUT	GET /register2.php HTTP/1.1 Host: synchrobox.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:29 UTC	608	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization Access-Control-Allow-Methods: GET, HEAD, OPTIONS, POST, PUT Access-Control-Allow-Origin: * content-type: text/javascript P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA" set-cookie: OAID=50fbf36fda3a979d5851b7d9e146c8f2; Max-Age=7776000; Expires=Mon, 19 Aug 2024 09:22:29 GMT; Path=/; Domain=.adswizz.com;SameSite=None;SameSite=None;Secure Content-Length: 589 Connection: Close
2024-05-21 09:22:29 UTC	589	IN	Data Raw: 76 61 72 20 63 6f 6d 5f 61 64 73 77 69 7a 7a 5f 72 65 67 69 73 74 65 72 5f 50 52 4f 54 4f 43 4f 4c 5f 56 45 52 53 49 4f 4e 20 3d 20 27 32 2e 32 2e 30 27 3b 0a 0a 69 66 20 28 74 79 70 65 6f 66 20 63 6f 6d 5f 61 64 73 77 69 7a 7a 5f 73 79 6e 63 68 72 6f 5f 6c 69 73 74 65 6e 65 72 69 64 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 76 61 72 20 63 6f 6d 5f 61 64 73 77 69 7a 7a 5f 73 79 6e 63 68 72 6f 5f 6c 69 73 74 65 6e 65 72 69 64 20 3d 20 27 35 30 66 62 66 33 36 66 64 61 33 61 39 37 39 64 35 38 35 31 62 37 64 39 65 31 34 36 63 38 66 32 27 3b 0a 7d 0a 65 6c 73 65 20 7b 0a 20 20 20 20 63 6f 6d 5f 61 64 73 77 69 7a 7a 5f 73 79 6e 63 68 72 6f 5f 6c 69 73 74 65 6e 65 72 69 64 20 3d 20 27 35 30 66 62 66 33 36 66 64 61 33 61 39 37 39 64 Data Ascii: var com_adswizz_register_PROTOCOL_VERSION = '2.2.0';if (typeof com_adswizz_synchro_listenerid === 'undefined') { var com_adswizz_synchro_listenerid = '50fbf36fda3a979d5851b7d9e146c8f2';}else { com_adswizz_synchro_listenerid = '50fbf36fda3a979d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.9	51134	13.32.99.18	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:29 UTC	545	OUT	GET /adswizz/js/SynchroClient2.js HTTP/1.1 Host: cdn.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:29 UTC	471	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9187 Connection: close Last-Modified: Tue, 15 Sep 2020 06:28:38 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 21 May 2024 03:22:25 GMT ETag: "3a38a4c45e3aa46a58e390f0b0baebfd" X-Cache: Hit from cloudfront Via: 1.1 2a44338adc8233e5b25aca28287a69c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 X-Amz-Cf-Id: x8TRM2vVumEGwWf9UYX_a3Np7We86E4Fm0SRo5a_gv4-dtvqYfgscQ== Age: 22716
2024-05-21 09:22:29 UTC	9187	IN	Data Raw: 76 61 72 20 63 6f 6d 5f 61 64 73 77 69 7a 7a 5f 73 79 6e 63 68 72 6f 5f 72 65 67 69 73 74 65 72 5f 56 45 52 53 49 4f 4e 20 3d 20 27 32 2e 30 2e 31 36 27 3b 0a 76 61 72 20 63 6f 6d 5f 61 64 73 77 69 7a 7a 5f 73 79 6e 63 68 72 6f 5f 64 65 62 75 67 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 63 6f 6d 5f 61 64 73 77 69 7a 7a 5f 73 79 6e 63 68 72 6f 5f 75 74 69 6c 73 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 40 64 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 2a 20 55 74 69 6c 69 74 79 20 66 75 6e 63 74 69 6f 6e 2e 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 73 6f 75 72 63 65 0a 20 20 20 20 Data Ascii: var com_adswizz_synchro_register_VERSION = '2.0.16';var com_adswizz_synchro_debug = false;var com_adswizz_synchro_utils = (function () { return { /** * @description * Utility function. * @param {Object} source

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.9	51593	34.149.50.64	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:29 UTC	1028	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 1112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_uid=c05a9224-54cc-4bf2-b49d-d107f602f175; st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9TmV3IFlvcmsmcmVnaW9uX2lzbzI9TlkmY2l0eV9uYW1lPU5ldyBZb3JrJmxvbmdpdHVkZT0tNzQuMDA2OCZsYXRpdHVkZT00MC43MTIzJm1ldHJvPTUwMSZ6aXA9MTAxMTg=; st_cs=Tq1rbu4xIbCkLdhuWHKgwuuMetzoCMWuxIrcGCkQrG22Gj0idEPKcRZj6gsyn6D1WPmFfB4LlqqK4nkgM0GcIQ==; st_csd=1716283340902:1716283340902
2024-05-21 09:22:29 UTC	1112	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 23 74 6f 63 2d 30 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 35 32 36 31 2d 32 32 39 36 2d 30 31 22 2c 22 63 6d 70 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 31 31 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 34 35 31 37 34 2c 22 74 74 66 62 22 3a 32 34 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 32 35 33 63 61 37 33 32 35 33 37 35 66 64 39 32 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 Data Ascii: {"url":"https://custommapposter.com/article/top/926#toc-0","publisherToken":"5261-2296-01","cmp":false,"timeout":1100,"version":"8.46.0","connectionType":"fixed","auctionStart":1716283345174,"ttfb":24,"bidRequests":[{"id":"253ca7325375fd92","transactionId

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.9	51594	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:29 UTC	968	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1673 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:29 UTC	1673	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 32 35 39 61 37 32 65 30 37 31 62 64 65 63 34 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 66 63 63 32 64 64 30 31 2d 33 37 37 38 2d 34 63 65 39 2d 62 65 34 62 2d 39 66 61 65 33 30 62 39 64 36 65 65 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 6d Data Ascii: {"Version":"1.0","Bids":{"259a72e071bdec4":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"fcc2dd01-3778-4ce9-be4b-9fae30b9d6ee","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.9	51592	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:29 UTC	611	OUT	POST /e HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive Content-Length: 362 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:29 UTC	362	OUT	Data Raw: 7b 22 63 22 3a 7b 22 64 6f 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 23 74 6f 63 2d 30 22 2c 22 55 22 3a 22 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 22 2c 22 72 65 22 3a 22 22 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 7d 2c 22 65 22 3a 5b 7b 22 41 22 3a 22 61 6d 78 22 2c 22 61 22 3a 22 6d 6d 74 2d 37 36 36 30 66 30 39 35 2d 38 35 36 37 2d 34 65 31 33 2d 62 32 36 36 2d 65 64 65 37 39 63 31 66 37 61 31 39 5f 31 5f 31 5f 61 64 22 2c 22 62 69 64 22 3a 22 32 37 31 38 39 36 34 66 32 39 61 65 Data Ascii: {"c":{"do":"custommapposter.com","u":"https://custommapposter.com/article/top/926#toc-0","U":"179b87ae-9f2f-46eb-82c4-75c95ef3faa4","re":"","V":"8.46.0","vg":"pbjs"},"e":[{"A":"amx","a":"mmt-7660f095-8567-4e13-b266-ede79c1f7a19_1_1_ad","bid":"2718964f29ae
2024-05-21 09:22:29 UTC	361	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:29 GMT Connection: close access-control-allow-origin: * cache-control: max-age=0, private, must-revalidate server: MonetEngine set-cookie: amuid2=996d8943-5a20-49da-8f9f-645d8dae1c6d; path=/; domain=.a-mo.net; expires=Wed, 21 May 2025 09:22:29 GMT; max-age=31536000; secure; HttpOnly; SameSite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.9	51596	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:31 UTC	1340	OUT	HEAD /?view=ad& HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283337.0.0.0
2024-05-21 09:22:32 UTC	643	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:32 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, private location: https://custommapposter.com/article/top/926 CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zo20%2FVMWkBzROCKqFXLPdLvO%2Bp8SbIKEhQLw5vQ6uOZ1TWQbePaK6i3SyTF49cyV%2FEaVhcqqcgrcqVCvJ9Hc5yeaEwaKWpPU3FLsXN8Uv3%2BWcN15JMbx9w%2BMPI3s0npq2I07MOKw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887380a42ccb4378-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.9	51598	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:31 UTC	611	OUT	POST /e HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive Content-Length: 357 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:31 UTC	357	OUT	Data Raw: 7b 22 63 22 3a 7b 22 64 6f 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 2f 74 6f 70 2f 39 32 36 22 2c 22 55 22 3a 22 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 22 2c 22 72 65 22 3a 22 22 2c 22 56 22 3a 22 38 2e 34 36 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 7d 2c 22 65 22 3a 5b 7b 22 41 22 3a 22 61 6d 78 22 2c 22 61 22 3a 22 6d 6d 74 2d 62 69 61 63 64 73 69 64 2d 66 32 69 63 2d 6a 69 74 62 2d 6b 6d 69 6c 2d 69 63 74 6f 61 6d 74 74 74 68 74 63 5f 31 5f 31 5f 61 64 22 2c 22 62 69 64 22 3a 22 35 31 37 34 38 66 61 36 65 36 31 63 32 33 30 38 22 2c Data Ascii: {"c":{"do":"custommapposter.com","u":"https://custommapposter.com/article/top/926","U":"179b87ae-9f2f-46eb-82c4-75c95ef3faa4","re":"","V":"8.46.0","vg":"pbjs"},"e":[{"A":"amx","a":"mmt-biacdsid-f2ic-jitb-kmil-ictoamttthtc_1_1_ad","bid":"51748fa6e61c2308",
2024-05-21 09:22:31 UTC	361	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:31 GMT Connection: close access-control-allow-origin: * cache-control: max-age=0, private, must-revalidate server: MonetEngine set-cookie: amuid2=704ffe17-190a-4830-8c4b-e5d3b4ac2432; path=/; domain=.a-mo.net; expires=Wed, 21 May 2025 09:22:31 GMT; max-age=31536000; secure; HttpOnly; SameSite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.9	51687	172.67.69.19	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:31 UTC	611	OUT	GET /px.gif?ch=1&e=0.35819143106914053 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:31 UTC	1234	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPqOMXdNo3pizYt_hLJruGdhpYFxGBJ6iM5JasfYWS6lYkLzgDanjcgpO_q6sZLAwc3lnJGjX7cJXA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Mon, 22 Apr 2024 09:00:29 GMT Cache-Control: public, max-age=86400 Age: 2508962 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yi8eaOTPz4sm2j9qBM3BXrRF7l7hvHZjlF%2B6EFbtoNUmaLXBAa79FTCPtx7Q%2FAUlAao%2FgYZl4vbFv%2F188opYujpnjKE2CG043WiaQIxP5GHBBMGc%2BZU4CZILflFO0mUJHg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887380a429fd41d8-EWR
2024-05-21 09:22:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.9	51601	185.89.211.84	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:31 UTC	589	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=6403784576581203868; receive-cookie-deprecation=1; XANDR_PANID=9-XqJteXZw8rDhfIwbDjTOycjFAHG7sd3WHY_0AvhD_0EUMRQVLn9EpKtkGmfDS8Th1Pn9j__GviylpIHivULN6dgx1NXuYwB1pNzSUxHoY.; icu=ChkI__eVARAKGAggCCgIMMzPsbIGOAhACEgIEMzPsbIGGAc.
2024-05-21 09:22:31 UTC	1358	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 21 May 2024 09:22:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 0108a490-d9a6-4eee-ad8f-ad388a85704a Set-Cookie: XANDR_PANID=9-XqJteXZw8rDhfIwbDjTOycjFAHG7sd3WHY_0AvhD_0EUMRQVLn9EpKtkGmfDS8Th1Pn9j__GviylpIHivULN6dgx1NXuYwB1pNzSUxHoY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:31 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 09-May-2034 09:22:31 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6403784576581203868; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Aug-2024 09:22:31 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-21 09:22:31 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.9	51600	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:31 UTC	683	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:31 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:31 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:31 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.9	51746	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:31 UTC	663	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:31 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:31 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:31 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.9	51595	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:31 UTC	1157	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1721 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:31 UTC	1721	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 32 38 31 37 64 63 65 65 63 31 65 62 64 34 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 31 36 31 32 65 38 66 61 2d 34 65 39 62 2d 34 34 31 37 2d 61 61 38 66 2d 61 35 62 62 34 62 31 35 35 65 33 36 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 6d 65 Data Ascii: {"Version":"1.0","Bids":{"2817dceec1ebd4":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"1612e8fa-4e9b-4417-aa8f-a5bb4b155e36","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monume
2024-05-21 09:22:32 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:31 GMT content-length: 179 x-envoy-upstream-service-time: 75 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:32 UTC	179	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 35 64 64 65 35 61 32 63 30 37 31 63 39 35 35 61 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 35 64 64 65 35 61 32 63 30 37 31 63 39 35 35 61 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 32 38 31 37 64 63 65 65 63 31 65 62 64 34 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"5dde5a2c071c955a4bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"5dde5a2c071c955a4bfb0857db316efd","BidID":"2817dceec1ebd4"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.9	51752	172.217.16.206	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:32 UTC	857	OUT	POST /el/AGSKWxUcIiucVp3Ey1zaSiOMfo9w2M6fYFRE9FLSOjsgSJuz3kbhAWpjXJhq0pIPGvRUuOztBsN7NzS0adjcb7TvpqimVKBxVJlZ_Zn80jOP-wMxTNBQZ-U9eDEfjPPMrIgKrQqvxqykDQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://custommapposter.com X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:32 UTC	155	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 31 36 32 38 33 33 35 30 33 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d Data Ascii: [null,null,null,null,null,null,null,null,1716283350305,null,null,[[1,1]],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0]
2024-05-21 09:22:32 UTC	1879	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 21 May 2024 09:22:32 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Gk97PjMCX6SWbwMZ_uLhdQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzjEtDikmJw05BicEqfwRoCxEI8HDfOb9zEJrDj5bH5TEouSfmF8cn5eSWpeSW6iSnFuiB2UWZSaUl-EQo7tQykIic_PT0zLz3eyMDIxMDU0FLPwDy-wAAA2R8jAQ" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.9	51753	69.166.1.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:32 UTC	884	OUT	GET /usa?loc=https%3A%2F%2Fx.serverbid.com%2Fusersync%3Fttt%3D1%26src%3D2%26cspi%3D0%26cn%3D5444%26spui%3D%26dpui%3D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _usd_custommapposter.com=53ab0b31-9d1d-4a2b-a436-11202a2257d7; __uih=1; __uis=054b4136-01f6-45be-b12f-751883821122; __uin_td=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; HAPLB8G=s85190\|Zkxn1
2024-05-21 09:22:32 UTC	790	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:32 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-190 x-xss-protection: 0 location: https://x.serverbid.com/usersync?ttt=1&src=2&cspi=0&cn=5444&spui=&dpui=054b4136-01f6-45be-b12f-751883821122 set-cookie: __uis=054b4136-01f6-45be-b12f-751883821122; expires=Thu, 20 Jun 2024 09:22:31 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85190\|Zkxn2; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.9	51776	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:32 UTC	1157	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1724 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:32 UTC	1724	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 36 39 33 62 33 30 33 61 65 61 65 37 62 66 63 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 34 62 66 39 64 63 32 61 2d 66 64 62 35 2d 34 38 30 66 2d 61 31 32 32 2d 37 39 65 31 63 37 34 34 66 33 61 32 22 2c 22 57 69 64 74 68 22 3a 31 36 30 2c 22 48 65 69 67 68 74 22 3a 36 30 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 31 36 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e Data Ascii: {"Version":"1.0","Bids":{"693b303aeae7bfc":{"PlacementID":"210a38a5ef434f943203dcfa1a13deed","TransactionID":"4bf9dc2a-fdb5-480f-a122-79e1c744f3a2","Width":160,"Height":600,"AvailableSizes":"160x600","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mon
2024-05-21 09:22:32 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:32 GMT content-length: 180 x-envoy-upstream-service-time: 13 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:32 UTC	180	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 34 36 37 31 64 66 61 64 66 31 62 64 62 66 63 36 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 34 36 37 31 64 66 61 64 66 31 62 64 62 66 63 36 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 42 69 64 49 44 22 3a 22 36 39 33 62 33 30 33 61 65 61 65 37 62 66 63 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"4671dfadf1bdbfc6210a38a5ef434f94","Placement":"210a38a5ef434f943203dcfa1a13deed","CreativeID":"4671dfadf1bdbfc6210a38a5ef434f94","BidID":"693b303aeae7bfc"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.9	51811	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:32 UTC	683	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:33 UTC	336	IN	HTTP/1.1 404 Not Found cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:32 GMT content-length: 9 content-type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:33 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.9	51855	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:33 UTC	968	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1674 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:33 UTC	1674	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 32 37 37 38 61 66 62 32 31 35 30 64 37 64 62 36 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 37 65 61 30 36 61 66 36 2d 38 63 38 65 2d 34 37 34 66 2d 61 37 30 62 2d 36 32 65 38 63 35 65 33 35 63 34 30 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 Data Ascii: {"Version":"1.0","Bids":{"2778afb2150d7db6":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"7ea06af6-8c8e-474f-a70b-62e8c5e35c40","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monu
2024-05-21 09:22:33 UTC	723	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:33 GMT content-length: 181 x-envoy-upstream-service-time: 85 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:33 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 36 37 31 32 32 36 63 61 61 64 64 30 39 36 39 62 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 36 37 31 32 32 36 63 61 61 64 64 30 39 36 39 62 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 32 37 37 38 61 66 62 32 31 35 30 64 37 64 62 36 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"671226caadd0969b4bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"671226caadd0969b4bfb0857db316efd","BidID":"2778afb2150d7db6"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.9	51822	148.66.234.46	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:33 UTC	661	OUT	GET /include/images/promo_bounty/300X250.jpg HTTP/1.1 Host: www.idrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1890c53250268d65cfe709175e182771.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:33 UTC	2556	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 21 May 2024 09:22:33 GMT Content-Type: image/jpeg Content-Length: 30810 Last-Modified: Fri, 12 Nov 2021 17:12:02 GMT Connection: close ETag: "618ea062-785a" Expires: Wed, 21 May 2025 09:22:33 GMT Cache-Control: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self' .idrive.com .idrivesync.com https://graph.facebook.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.chatbot.com https://www.clarity.ms https://.bing.com https://maxaccess-api.onlineada.workers.dev https://snap.licdn.com https://px.ads.linkedin.com https://cdn.jsdelivr.net https://js.zohocdn.com https://salesiq.zoho.com https://embed.tawk.to https://app.chatsupport.co https://.zendesk.com https://static.zdassets.com https://tagmanager.google.com https://static.idriveonlinebackup.com https://js.hcaptcha.com https://.facebook.com https://bmrsignal.idrivelite.com https://.google.com https://apis.google.com https://accounts.google.com https://www.google-analytics.com https://.criteo.com https://www.google-analytics.com https://ssl.google-analytics.com https://.criteo.net https://cdn.livechatinc.com https://gum.criteo.com https://sslwidget.criteo.com https://.livechatinc.com https://ajax.googleapis.com https://html5shim.googlecode.com https:/ [TRUNCATED] Strict-Transport-Security: max-age=15768000 Accept-Ranges: bytes
2024-05-21 09:22:33 UTC	13828	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 8a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xm
2024-05-21 09:22:33 UTC	16384	IN	Data Raw: d8 d9 75 f7 54 f3 86 b5 5a 8d 4f 6e b8 da b8 a5 71 a4 7a 0d 0c 9c ad 26 d8 fe 84 6a 95 7d dd 6b 1b 66 34 b3 f3 87 42 4d 25 ce d5 6d bc c6 30 ee 91 11 32 3d 77 04 2e a0 a4 f9 d2 a4 90 52 7e 10 75 8a ed 98 5d 54 9a aa 32 da bd 3b 4e b0 6d 32 30 ca 38 e3 0b 83 8f dc dc b7 d8 a3 c5 9b 2b 63 69 9e a5 2d c7 6a 54 2a 02 dc 52 8f 65 7b 35 c7 e2 1a 3b 16 ac bc b1 49 b6 bb a7 67 87 6b 75 17 af ac f2 6e 29 3e e1 cb 4c 61 e2 dd 35 ea a4 94 20 92 a5 9e d3 d7 5e 63 25 30 3d 52 9d 71 33 1e 01 65 4d 01 e8 f9 07 61 ae a6 24 48 b5 1a 08 5e c5 29 00 f6 85 7f e4 d4 e5 21 4a a8 90 31 1b c5 df 08 7d 6e db 3e 7e df 29 7d e4 eb 42 cd 1b 70 fc b4 7c 85 d3 cb e5 f2 eb a1 a2 d6 cf 4c f0 c6 2f 6a f8 57 39 cd d7 68 23 aa 5c 92 5b 1f c0 f9 57 bc 74 e6 3b 94 da 72 68 dd f5 bd ed af a0 Data Ascii: uTZOnqz&j}kf4BM%m02=w.R~u]T2;Nm208+ci-jT*Re{5;Igkun)>La5 ^c%0=Rq3eMa$H^)!J1}n>~)}Bp\|L/jW9h#\[Wt;rh
2024-05-21 09:22:33 UTC	598	IN	Data Raw: e9 b6 e7 19 ad 9a 20 b7 d9 f3 0b dd aa 00 14 10 a1 dc 24 b0 cd 09 ad 3b b6 dc 4a 7b 47 9b 59 e1 aa bd 05 48 ce 49 73 36 8e 75 fe 11 a2 d4 4f 3d db 16 e5 2e 59 42 2d f8 5a a8 dc 91 22 44 b7 dd 93 29 f7 24 c9 7d 45 6f 48 75 45 6b 5a 8f 69 52 94 49 27 ee eb 0c a4 e4 ea f6 9b d0 84 61 15 18 a4 92 d8 96 08 b3 a8 2e 3b 9b cf f3 b6 a1 0b 6b 59 ad f9 bb 72 40 48 b7 a2 e5 28 30 00 14 03 bb 0e 6d a5 0d 3b 35 b0 b5 77 92 cb 9e 54 e4 ab 39 92 e0 ba 09 4f ac 76 2d b9 72 e4 8d 7c 34 a8 d2 24 a8 92 49 24 9a 92 7b 49 d6 b9 d2 33 6d f7 2b 8d a6 52 27 5a a7 c9 b6 4d 6d 2b 43 73 22 3a b6 5d 4a 5c 49 42 c0 5a 08 50 0a 4a 8a 4f 5e a0 d3 56 84 e5 07 58 b6 9f 31 8a fd 8b 77 e3 92 e4 54 a3 c8 d2 6b 0c 56 0f 91 e2 60 ea a6 60 d0 06 80 34 01 a0 0d 00 68 03 40 1a 00 d0 06 80 34 01 Data Ascii: $;J{GYHIs6uO=.YB-Z"D)$}EoHuEkZiRI'a.;kYr@H(0m;5wT9Ov-r\|4$I${I3m+R'ZMm+Cs":]J\IBZPJO^VX1wTkV``4h@4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.9	51859	192.132.33.68	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:33 UTC	637	OUT	GET /pixel/cookiesync?source=c91bfcce-bb43-46f7-b14e-567c0a4332b3 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:33 UTC	580	IN	HTTP/1.1 302 Found Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://pixel.rubiconproject.com/tap.php?v=71772&nid=3664&put=c04dba63-1752-44a6-a6da-a816ddd848b1 Set-Cookie: GLOBALID=2uKlc8-sIBd984cSkDr2DtjNhbWejoTvoTrkUoVH5vN884WXTUx-0_-9-3tEPQygeGO73CAlsrMC4Q2; domain=.bttrack.com; expires=Mon, 19-Aug-2024 09:21:33 GMT; path=/; secure; SameSite=None X-ServerName: Track003-iad Date: Tue, 21 May 2024 09:21:33 GMT Connection: close Content-Length: 223 Strict-Transport-Security: max-age=31536000;
2024-05-21 09:22:33 UTC	223	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 31 37 37 32 26 61 6d 70 3b 6e 69 64 3d 33 36 36 34 26 61 6d 70 3b 70 75 74 3d 63 30 34 64 62 61 36 33 2d 31 37 35 32 2d 34 34 61 36 2d 61 36 64 61 2d 61 38 31 36 64 64 64 38 34 38 62 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://pixel.rubiconproject.com/tap.php?v=71772&nid=3664&put=c04dba63-1752-44a6-a6da-a816ddd848b1">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.9	51895	159.89.246.130	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:33 UTC	708	OUT	GET /usersync?ttt=1&src=1&cspi=0&cn=5573&dpui=419fdeb2-d93b-4065-8361-053e6f939d20 HTTP/1.1 Host: x.serverbid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63
2024-05-21 09:22:33 UTC	527	IN	HTTP/1.1 200 OK access-control-allow-origin: https://sync.serverbid.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: image/gif content-length: 35 set-cookie: CONSUMABLEID=c0c42e7a5092458e842e7a5092558e63; Max-Age=1296000; Expires=Wed, 05 Jun 2024 09:22:33 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 21 May 2024 09:22:33 GMT connection: close
2024-05-21 09:22:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.9	51896	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:33 UTC	961	OUT	GET /cchain/0/1119?gpp=&gdpr_consent=&gdpr=&gpp_sid=&us_privacy=&A=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&bidder=appnexus&cbx=aHR0cHM6Ly94LnNlcnZlcmJpZC5jb20vdXNlcnN5bmM_dHR0PTEmc3JjPTImY3NwaT0wJmNuPTYyOTQmc3B1aT0mZHB1aT0%3D&uid=6403784576581203868 HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; _sv3_0=1; __amc=15_1716283291_1716283352
2024-05-21 09:22:34 UTC	750	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate content-length: 0 date: Tue, 21 May 2024 09:22:34 GMT location: https://ssum.casalemedia.com/usermatchredir?s=191503&gdpr=0&us_privacy=1---&cb=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F1%2F1119%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D%26gpp_sid%3D%26us_privacy%3D%26A%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dindex_rtb%26cbx%3DaHR0cHM6Ly94LnNlcnZlcmJpZC5jb20vdXNlcnN5bmM_dHR0PTEmc3JjPTImY3NwaT0wJmNuPTYyOTQmc3B1aT0mZHB1aT0%253D%26uid%3D server: envoy vary: accept-encoding set-cookie: _sv3_2=1; path=/; domain=prebid.a-mo.net; expires=Wed, 22 May 2024 09:22:34 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.9	51927	142.250.186.129	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:34 UTC	859	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 2e5745ad01ecb0782e09eebcc467bce9.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:34 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 21 May 2024 09:22:34 GMT Expires: Wed, 21 May 2025 09:22:34 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:34 UTC	683	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-05-21 09:22:34 UTC	1390	IN	Data Raw: 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 61 28 61 29 7d 3b 76 61 72 20 65 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 65 61 3f 61 3a 22 22 7d 3b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: urn t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(
2024-05-21 09:22:34 UTC	1390	IN	Data Raw: 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 3d 64 7c 7c 30 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6b 3d 5b 5d 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 6b 2e 70 75 73 68 28 70 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 71 61 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e Data Ascii: .split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(Strin
2024-05-21 09:22:34 UTC	1390	IN	Data Raw: 3b 28 7b 7d 29 5b 33 5d 3d 64 61 28 70 28 6e 65 77 20 6e 28 6c 2c 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 61 64 73 2f 72 69 63 68 6d 65 64 69 61 2f 73 74 75 64 69 6f 5f 63 61 6e 61 72 79 2f 6d 75 2f 74 65 6d 70 6c 61 74 65 73 2f 68 69 66 69 2f 68 69 66 69 5f 63 61 6e 61 72 79 2e 6a 73 22 29 29 29 3b 76 61 72 20 75 61 3d 2f 5e 28 5b 5e 3b 5d 2b 29 3b 28 5c 64 2b 29 3b 28 5b 5c 73 5c 53 5d 2a 29 24 2f 3b 76 61 72 20 76 61 3d 2f 5e 28 5b 61 2d 7a 30 2d 39 5d 28 5b 61 2d 7a 30 2d 39 2d 5d 7b 30 2c 36 31 7d 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 73 61 66 65 66 72 61 6d 65 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 74 70 63 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 73 65 63 75 Data Ascii: ;({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S]*)$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secu
2024-05-21 09:22:34 UTC	1309	IN	Data Raw: 74 22 2c 35 30 37 29 3b 76 2e 65 72 72 6f 72 26 26 76 2e 6d 65 74 61 26 26 76 2e 69 64 7c 7c 28 76 3d 6e 65 77 20 68 61 29 3b 69 66 28 76 2e 6d 73 67 29 7b 76 61 72 20 43 61 3d 76 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 49 2e 67 2e 70 75 73 68 28 32 29 3b 49 2e 68 5b 32 5d 3d 7a 28 22 6d 73 67 22 2c 43 61 29 7d 76 61 72 20 44 61 3d 5b 76 2e 6d 65 74 61 7c 7c 7b 7d 5d 3b 49 2e 67 2e 70 75 73 68 28 33 29 3b 49 2e 68 5b 33 5d 3d 44 61 3b 76 61 72 20 4a 3d 66 2c 4b 3d 5b 5d 2c 4c 2c 4d 3d 6e 75 6c 6c 2c 4e 3b 64 6f 7b 4e 3d 4a 3b 76 61 72 20 50 3b 74 72 79 7b 76 61 72 20 51 3b 69 66 28 51 3d 21 21 4e 26 26 6e 75 6c 6c 21 3d 4e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 77 28 4e 2e 66 6f 6f 29 3b 51 3d 21 30 3b Data Ascii: t",507);v.error&&v.meta&&v.id\|\|(v=new ha);if(v.msg){var Ca=v.msg.substring(0,512);I.g.push(2);I.h[2]=z("msg",Ca)}var Da=[v.meta\|\|{}];I.g.push(3);I.h[3]=Da;var J=f,K=[],L,M=null,N;do{N=J;var P;try{var Q;if(Q=!!N&&null!=N.location.href)b:{try{w(N.foo);Q=!0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.9	51950	46.228.174.117	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:34 UTC	683	OUT	GET /usersync2/rubicon HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%7D
2024-05-21 09:22:35 UTC	707	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:34 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003%22%2C%22zdxidn%22%3A%222013%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 21 May 2025 09:22:34 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://x.bidswitch.net/sync?ssp=adconductor&user_id=RX-8049d3ed-2f50-405b-8cd5-dc9be6476848-003&rndcb=2159105247 etag: RX8049d3ed2f50405b8cd5dc9be6476848003 connection: close
2024-05-21 09:22:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.9	51975	216.58.206.65	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:35 UTC	563	OUT	GET /rtv/012405101652000/v0/amp-ad-exit-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:35 UTC	1578	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 14931 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 20 May 2024 19:26:58 GMT Expires: Tue, 20 May 2025 19:26:58 GMT Cache-Control: public, max-age=31536000 ETag: "3d288e2c3c48752d" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 50137 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 35 31 30 31 36 35 32 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 61 64 2d 65 78 69 74 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 28 28 29 3d 3e 7b 76 61 72 20 6e 2c 7b 69 73 41 72 72 61 79 3a 65 7d 3d 41 72 72 61 79 2c 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 69 2c 74 6f 53 74 72 69 6e 67 3a 72 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 22 6d 65 73 73 61 67 65 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2405101652000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 20 6d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 64 2e 64 65 76 7c 7c 28 64 2e 64 65 76 3d 6d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7b 72 65 74 75 72 6e 20 62 28 29 2e 61 73 73 65 72 74 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 6a 28 74 29 2c 73 3d 53 28 72 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 29 7b 63 6f 6e 73 74 20 6f 3d 50 28 74 Data Ascii: unction g(t){return m()}function y(){return d.dev\|\|(d.dev=m())}function _(t,n,e,i,r,s,o,c,u,l,a){return t}function A(t,n,e,i,r,s,o,c,u,l,a){return b().assert(t,n,e,i,r,s,o,c,u,l,a)}function I(t,n,e,i){const r=j(t),s=S(r);!function(t,n,e,i,r,s){const o=P(t
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 3a 65 2c 63 6f 6e 74 65 78 74 3a 6e 75 6c 6c 2c 63 74 6f 72 3a 6e 75 6c 6c 7d 7d 76 61 72 20 43 3d 22 68 6f 73 74 2d 76 69 73 69 62 69 6c 69 74 79 22 2c 44 3d 22 68 6f 73 74 2d 66 75 6c 6c 73 63 72 65 65 6e 22 2c 46 3d 22 68 6f 73 74 2d 65 78 69 74 22 2c 4d 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 69 73 41 76 61 69 6c 61 62 6c 65 28 74 29 7b 72 65 74 75 72 6e 21 21 28 6e 3d 74 2c 6a 28 6e 29 29 2e 67 65 74 48 65 61 64 4e 6f 64 65 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 68 6f 73 74 2d 73 65 72 76 69 63 65 5d 22 29 3b 76 61 72 20 6e 7d 73 74 61 74 69 63 20 76 69 73 69 62 69 6c 69 74 79 46 6f 72 44 6f 63 28 74 29 7b 72 65 74 75 72 6e 20 54 28 74 2c 43 29 7d 73 74 61 74 69 63 20 69 6e 73 74 61 6c 6c 56 69 73 69 62 69 6c 69 Data Ascii: :e,context:null,ctor:null}}var C="host-visibility",D="host-fullscreen",F="host-exit",M=class{static isAvailable(t){return!!(n=t,j(n)).getHeadNode().querySelector("script[host-service]");var n}static visibilityForDoc(t){return T(t,C)}static installVisibili
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 3d 28 47 28 47 28 7b 7d 2c 42 29 2c 7b 7d 2c 7b 22 62 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 34 61 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2f 62 34 61 2d 72 75 6e 6e 65 72 2e 68 74 6d 6c 22 7d 29 2c 42 29 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 74 2c 6e 2c 65 29 7b 69 66 28 41 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 66 69 6e 61 6c 55 72 6c 2c 22 66 69 6e 61 6c 55 72 6c 20 6f 66 20 74 61 72 67 65 74 20 27 25 73 27 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 22 2c 74 29 2c 6e 2e 66 69 6c 74 65 72 73 26 26 6e 2e 66 69 6c 74 65 72 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 41 28 65 2e 66 69 6c 74 65 72 73 5b 74 5d 2c 22 66 69 6c 74 65 72 20 27 25 73 27 20 6e Data Ascii: =(G(G({},B),{},{"bg":"https://tpc.googlesyndication.com/b4a/experimental/b4a-runner.html"}),B);function J(t,n,e){if(A("string"==typeof n.finalUrl,"finalUrl of target '%s' must be a string",t),n.filters&&n.filters.forEach((t=>{A(e.filters[t],"filter '%s' n
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 49 2e 62 6f 74 74 6f 6d 7d 6f 6e 4c 61 79 6f 75 74 4d 65 61 73 75 72 65 28 29 7b 74 68 69 73 2e 73 49 2e 67 65 74 56 73 79 6e 63 28 29 2e 6d 65 61 73 75 72 65 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 77 69 6e 3a 74 7d 3d 74 68 69 73 2e 73 49 3b 69 66 28 74 68 69 73 2e 72 49 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 68 69 73 2e 72 49 29 3b 41 28 6e 2c 60 72 65 6c 61 74 69 76 65 54 6f 20 65 6c 65 6d 65 6e 74 20 24 7b 74 68 69 73 2e 72 49 7d 20 6e 6f 74 20 66 6f 75 6e 64 2e 60 29 3b 63 6f 6e 73 74 20 65 3d 6e 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 74 68 69 73 2e 6f 49 2e 6c 65 66 74 3d 65 2e 6c 65 66 74 2c 74 68 69 73 2e 6f 49 2e 74 6f 70 3d 65 2e 74 6f 70 2c Data Ascii: I.bottom}onLayoutMeasure(){this.sI.getVsync().measure((()=>{const{win:t}=this.sI;if(this.rI){const n=t.document.querySelector(this.rI);A(n,`relativeTo element ${this.rI} not found.`);const e=n.getBoundingClientRect();this.oI.left=e.left,this.oI.top=e.top,
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 72 74 28 29 7d 65 78 69 74 28 74 29 7b 63 6f 6e 73 74 7b 61 72 67 73 3a 6e 7d 3d 74 3b 6c 65 74 20 65 2c 7b 65 76 65 6e 74 3a 69 7d 3d 74 3b 41 28 22 76 61 72 69 61 62 6c 65 22 69 6e 20 6e 21 3d 22 74 61 72 67 65 74 22 69 6e 20 6e 2c 22 4f 6e 65 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 6f 66 20 27 74 61 72 67 65 74 27 20 61 6e 64 20 27 76 61 72 69 61 62 6c 65 27 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 22 29 2c 22 76 61 72 69 61 62 6c 65 22 69 6e 20 6e 3f 28 65 3d 74 68 69 73 2e 75 49 5b 6e 2e 76 61 72 69 61 62 6c 65 5d 2c 65 7c 7c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 29 2c 41 28 65 2c 60 56 61 72 69 61 62 6c 65 20 74 61 72 67 65 74 20 6e 6f 74 20 66 6f 75 6e 64 2c 20 76 61 72 69 61 62 6c 65 3a 27 24 7b 6e 2e 76 61 72 69 61 62 6c 65 7d 27 2c Data Ascii: rt()}exit(t){const{args:n}=t;let e,{event:i}=t;A("variable"in n!="target"in n,"One and only one of 'target' and 'variable' must be specified"),"variable"in n?(e=this.uI[n.variable],e\|\|(e=n.default),A(e,`Variable target not found, variable:'${n.variable}',
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 6e 73 70 6f 72 74 53 69 67 6e 61 6c 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 65 78 70 61 6e 64 53 74 72 69 6e 67 53 79 6e 63 28 6f 2e 69 66 72 61 6d 65 54 72 61 6e 73 70 6f 72 74 53 69 67 6e 61 6c 2c 7b 22 49 46 52 41 4d 45 5f 54 52 41 4e 53 50 4f 52 54 5f 53 49 47 4e 41 4c 22 3a 28 74 2c 6e 29 3d 3e 7b 69 66 28 21 74 7c 7c 21 6e 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 68 49 5b 74 5d 3b 72 65 74 75 72 6e 20 65 26 26 6e 20 69 6e 20 65 3f 65 5b 6e 5d 3a 76 6f 69 64 20 30 7d 7d 29 3b 69 66 28 6f 2e 69 66 72 61 6d 65 54 72 61 6e 73 70 6f 72 74 53 69 67 6e 61 6c 3d 3d 60 49 46 52 41 4d 45 5f 54 52 41 4e 53 50 4f 52 54 5f 53 49 47 4e 41 4c 24 7b 74 7d 60 29 79 28 29 2e 65 72 72 6f 72 28 6e 74 2c 22 49 6e 76 61 6c 69 64 20 49 46 52 41 4d Data Ascii: nsportSignal){const t=r.expandStringSync(o.iframeTransportSignal,{"IFRAME_TRANSPORT_SIGNAL":(t,n)=>{if(!t\|\|!n)return"";const e=this.hI[t];return e&&n in e?e[n]:void 0}});if(o.iframeTransportSignal==`IFRAME_TRANSPORT_SIGNAL${t}`)y().error(nt,"Invalid IFRAM
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 2c 22 27 74 61 72 67 65 74 73 27 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 74 29 4a 28 65 2c 74 5b 65 5d 2c 6e 29 7d 28 74 2e 74 61 72 67 65 74 73 2c 74 29 2c 74 7d 28 75 28 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 29 3b 6c 65 74 20 65 3b 73 3d 74 2e 6f 70 74 69 6f 6e 73 2c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 72 2e 63 61 6c 6c 28 73 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 54 69 6d 69 6e 67 45 76 65 6e 74 26 26 28 65 3d 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 54 69 6d 69 6e 67 45 76 65 6e 74 2c 74 68 69 73 2e 6c 49 2e 73 70 6c 69 63 65 28 30 2c 31 2c 5f 28 51 28 22 Data Ascii: "==typeof t,"'targets' must be an object");for(const e in t)J(e,t[e],n)}(t.targets,t),t}(u(n.textContent));let e;s=t.options,"[object Object]"===r.call(s)&&"string"==typeof t.options.startTimingEvent&&(e=t.options.startTimingEvent,this.lI.splice(0,1,_(Q("
2024-05-21 09:22:35 UTC	1578	IN	Data Raw: 41 49 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 69 3d 6e 7c 7c 4f 28 65 29 3b 69 66 28 65 26 26 65 21 3d 69 26 26 4f 28 65 29 3d 3d 69 29 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 74 2c 6e 29 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 22 41 4d 50 2d 41 44 22 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 2e 67 65 74 52 65 73 6f 75 72 63 65 49 64 28 29 29 7d 63 61 74 63 68 28 74 Data Ascii: AI(){return function(t,n){try{const e=function(t,n){const e=(t.ownerDocument\|\|t).defaultView,i=n\|\|O(e);if(e&&e!=i&&O(e)==i)try{return e.frameElement}catch(t){}return null}(t,n).parentElement;if("AMP-AD"==e.nodeName)return String(e.getResourceId())}catch(t
2024-05-21 09:22:35 UTC	729	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 64 61 74 61 7d 28 74 29 29 3b 6e 26 26 22 69 66 72 61 6d 65 2d 74 72 61 6e 73 70 6f 72 74 2d 72 65 73 70 6f 6e 73 65 22 3d 3d 6e 2e 74 79 70 65 26 26 28 74 68 69 73 2e 49 49 28 6e 2c 74 2e 6f 72 69 67 69 6e 29 2c 6e 2e 63 72 65 61 74 69 76 65 49 64 3d 3d 74 68 69 73 2e 70 49 26 26 28 74 68 69 73 2e 68 49 5b 6e 2e 76 65 6e 64 6f 72 5d 3d 6e 2e 6d 65 73 73 61 67 65 29 29 7d 29 2c 76 6f 69 64 20 30 29 29 29 7d 49 49 28 74 2c 6e 29 7b 41 28 74 2e 6d 65 73 73 61 67 65 2c 22 52 65 63 65 69 76 65 64 20 65 6d 70 74 79 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 33 70 20 61 6e 61 6c 79 74 69 63 73 20 66 72 61 6d 65 22 29 2c 41 28 74 2e 63 72 65 61 74 69 76 65 49 64 2c 22 52 65 63 65 69 76 65 64 20 6d 61 6c 66 6f Data Ascii: tion(t){return t.data}(t));n&&"iframe-transport-response"==n.type&&(this.II(n,t.origin),n.creativeId==this.pI&&(this.hI[n.vendor]=n.message))}),void 0)))}II(t,n){A(t.message,"Received empty response from 3p analytics frame"),A(t.creativeId,"Received malfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.9	51995	134.122.125.115	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:35 UTC	1662	OUT	GET /api/cookie?partnerId=kueez-sonobi&gdpr=0&gdpr_consent=&us_privacy=&userId=054b4136-01f6-45be-b12f-751883821122 HTTP/1.1 Host: sync.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.kueezrtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=a4F14RzBdUGJNDA2dtPKVgyBSczJCs2MhBeL3JkSXUFY3UofnUgUVJAYmVOdlxjIXN%2BcHYQSFZmYBx3U20mcnYhIldWQmNnGHRdNHd5eHFjHkZCY2UbdFRldHsvJ3cGVkNkZkJ0Am1%2Ben9mbRBSR2czTHNXbXR5fnN2B1xGY2FLJ11jJnxsaGMEV0MxZEohAmEkfih2IAMGQ2YxTXcGY3FoYmZ3AVMVZWpLelU0JHx6dnYGUExmNEknAmZlZmxycgUFQmE0TnMFNnF%2BfHN1BlxCNmofIAZ3a2h4d3FUUEZiNkh1UjElKChzeQZRFzJrQiBGeWV8fXMlAlVAZ2sZcVJndXt5JyBRBUxgM01gSHdxeX0ndgQBQmdmTHdVYnArLXwnVgZNNWNYbkZjdH0vcSRUVUAzZhxwBWQlfXgndgdQEmZwVmBSZiMsKnZ0AFFAMmUbIAZldSx%2FcXIEUUJyflh0V2ImfH1wJQYHQDZgG3MGYnEpeXJwVlxWfHBMcVM0cix7cHBTB0JkYE12UG1xLHZ2cQRGWHJkSXUFYCEoLXdyAlNDZWpIcVdkInN4fHcQSFZmYU0jUmd%2FL38lIgRQRmdmTnpSM356enZjb0hWMz0PLBB3fXpiZiZWFAZyaAFgDSYCH2x%2BJ1MIBzV%2BWCUAJTVodGZxEEhWNzYKMCc6KTkrKjUQXlZyflg3FwU1IzglIktGTnJwB25GJiI5PS0uXEZOcmYZJFBgIyt8aXNWARB9YkomAHhxKH0hbFcATWRjHiFRbH9%2BemZtEAcbPjwfIRA8KCQHIGMIRkJlMEhzVWwiLC9yclAHFmQzTXIAYH8oLGZtEA0HGTQIIwkwZXA6NjRXGQ%3D%3D
2024-05-21 09:22:36 UTC	574	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; Domain=.kueezrtb.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:36 GMT; Secure; SameSite=None content-type: image/avif content-length: 43 date: Tue, 21 May 2024 09:22:36 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.9	52005	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:36 UTC	799	OUT	GET /visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=6403784576581203868&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:36 UTC	465	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: image/gif expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:35 GMT content-length: 49 x-envoy-upstream-service-time: 3 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:36 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 ff ff ff ff ff ff fe 01 02 00 00 00 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.9	52030	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:36 UTC	1017	OUT	GET /cchain/1/1119?us_privacy=1---&gpp=&gdpr_consent=&gdpr=&gpp_sid=&us_privacy=&A=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&bidder=index_rtb&cbx=aHR0cHM6Ly94LnNlcnZlcmJpZC5jb20vdXNlcnN5bmM_dHR0PTEmc3JjPTImY3NwaT0wJmNuPTYyOTQmc3B1aT0mZHB1aT0%3D&uid=ZkxnuNHM6HMAAHezAHb..QAA%26983 HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.serverbid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; sd_amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4; _sv3_0=1; __amc=17_1716283291_1716283353; _sv3_2=1; amdgt_lk%40cfs=0
2024-05-21 09:22:36 UTC	740	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate content-length: 0 date: Tue, 21 May 2024 09:22:36 GMT location: https://cm.adform.net/cookie?&gdpr=0&us_privacy=1---&redirect_url=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F2%2F1119%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D%26gpp_sid%3D%26us_privacy%3D%26A%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dadform%26cbx%3DaHR0cHM6Ly94LnNlcnZlcmJpZC5jb20vdXNlcnN5bmM_dHR0PTEmc3JjPTImY3NwaT0wJmNuPTYyOTQmc3B1aT0mZHB1aT0%253D%26uid%3D%24UID server: envoy vary: accept-encoding set-cookie: _sv3_8=1; path=/; domain=prebid.a-mo.net; expires=Wed, 22 May 2024 09:22:36 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 7 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.9	52032	23.212.88.20	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:36 UTC	611	OUT	GET /rtb/resources/release-20231121-135-adperformance.js HTTP/1.1 Host: warp.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3592849466404713000V10
2024-05-21 09:22:36 UTC	657	IN	HTTP/1.1 200 OK Server: UploadServer Content-Length: 73447 Content-Type: application/javascript X-GUploader-UploadID: ABPtcPrDBFm7o7QKmX4XaSB8aYt3ZqnHxngeTSt83ozGJDQNyOKFWA_aTOKADcSChCGSVn_JGg Strict-Transport-Security: max-age=604800 x-goog-storage-class: STANDARD x-goog-hash: md5=hB2rzgtHepPZz3N5uesTaA== x-goog-hash: crc32c=iBXD1A== x-goog-stored-content-length: 73447 x-goog-stored-content-encoding: identity x-goog-metageneration: 1 x-goog-generation: 1700562102250666 ETag: "841dabce0b477a93d9cf7379b9eb1368" Cache-Control: max-age=3600 Expires: Tue, 21 May 2024 10:22:36 GMT Date: Tue, 21 May 2024 09:22:36 GMT Connection: close
2024-05-21 09:22:36 UTC	2880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 28 6e 3d 7b 70 61 74 68 3a 74 2c 65 78 70 6f 72 74 73 3a 7b 7d 2c 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: !function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return func
2024-05-21 09:22:36 UTC	16384	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 3f 58 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 3a 7b 7d 7d 2c 51 3d 21 7a 26 26 21 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 4a 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 2c 5a 3d 7a 26 26 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 34 32 21 3d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 76 61 6c 75 65 3a 34 32 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 2c 65 Data Ascii: n(e){return q?X.createElement(e):{}},Q=!z&&!f((function(){return 7!==Object.defineProperty(J("div"),"a",{get:function(){return 7}}).a})),Z=z&&f((function(){return 42!==Object.defineProperty((function(){}),"prototype",{value:42,writable:!1}).prototype})),e
2024-05-21 09:22:36 UTC	8192	IN	Data Raw: 68 72 6f 77 20 6e 65 77 20 47 72 28 6c 65 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 22 29 3b 69 66 28 52 72 28 69 29 29 7b 66 6f 72 28 6f 3d 30 2c 61 3d 77 74 28 65 29 3b 61 3e 6f 3b 6f 2b 2b 29 69 66 28 28 75 3d 6d 28 65 5b 6f 5d 29 29 26 26 75 65 28 55 72 2c 75 29 29 72 65 74 75 72 6e 20 75 3b 72 65 74 75 72 6e 20 6e 65 77 20 48 72 28 21 31 29 7d 72 3d 56 72 28 65 2c 69 29 7d 66 6f 72 28 63 3d 76 3f 65 2e 6e 65 78 74 3a 72 2e 6e 65 78 74 3b 21 28 73 3d 69 65 28 63 2c 72 29 29 2e 64 6f 6e 65 3b 29 7b 74 72 79 7b 75 3d 6d 28 73 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 65 29 7b 42 72 28 72 2c 22 74 68 72 6f 77 22 2c 65 29 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 75 26 26 75 26 26 75 65 28 55 72 2c 75 29 29 72 65 Data Ascii: hrow new Gr(le(e)+" is not iterable");if(Rr(i)){for(o=0,a=wt(e);a>o;o++)if((u=m(e[o]))&&ue(Ur,u))return u;return new Hr(!1)}r=Vr(e,i)}for(c=v?e.next:r.next;!(s=ie(c,r)).done;){try{u=m(s.value)}catch(e){Br(r,"throw",e)}if("object"==typeof u&&u&&ue(Ur,u))re
2024-05-21 09:22:36 UTC	16384	IN	Data Raw: 61 74 65 2c 73 6f 3d 6f 2e 70 72 6f 63 65 73 73 2c 66 6f 3d 6f 2e 44 69 73 70 61 74 63 68 2c 6c 6f 3d 6f 2e 46 75 6e 63 74 69 6f 6e 2c 76 6f 3d 6f 2e 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 2c 68 6f 3d 6f 2e 53 74 72 69 6e 67 2c 70 6f 3d 30 2c 79 6f 3d 7b 7d 3b 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 51 69 3d 6f 2e 6c 6f 63 61 74 69 6f 6e 7d 29 29 3b 76 61 72 20 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6b 28 79 6f 2c 65 29 29 7b 76 61 72 20 74 3d 79 6f 5b 65 5d 3b 64 65 6c 65 74 65 20 79 6f 5b 65 5d 2c 74 28 29 7d 7d 2c 67 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 6f 28 65 29 7d 7d 2c 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 6f 28 65 2e 64 61 74 61 29 7d 2c 77 6f 3d 66 75 6e Data Ascii: ate,so=o.process,fo=o.Dispatch,lo=o.Function,vo=o.MessageChannel,ho=o.String,po=0,yo={};f((function(){Qi=o.location}));var mo=function(e){if(k(yo,e)){var t=yo[e];delete yo[e],t()}},go=function(e){return function(){mo(e)}},bo=function(e){mo(e.data)},wo=fun
2024-05-21 09:22:36 UTC	8192	IN	Data Raw: 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 52 63 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 69 3d 52 63 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 72 2c 61 72 67 75 6d 65 6e 74 73 2c 69 29 7d 65 6c 73 65 20 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 50 63 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 63 28 65 2c 74 29 7b 69 66 28 74 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 41 63 28 74 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 29 29 72 65 74 75 72 6e 20 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 Data Ascii: turn function(){var n,r=Rc(e);if(t){var i=Rc(this).constructor;n=Reflect.construct(r,arguments,i)}else n=r.apply(this,arguments);return Pc(this,n)}}function Pc(e,t){if(t&&("object"===Ac(t)\|\|"function"==typeof t))return t;if(void 0!==t)throw new TypeError(
2024-05-21 09:22:36 UTC	16384	IN	Data Raw: 7c 7c 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 72 3d 74 68 69 73 2e 65 76 65 6e 74 73 2e 67 65 74 28 65 29 3b 72 7c 7c 28 72 3d 6e 65 77 20 66 73 28 65 29 2c 74 68 69 73 2e 65 76 65 6e 74 73 2e 73 65 74 28 65 2c 72 29 29 2c 72 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 2e 67 65 74 28 65 29 3b 6e 26 26 28 6e 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 74 29 2c 30 3d 3d 3d 6e 2e 6c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 65 76 65 6e 74 73 2e 64 65 6c 65 74 65 28 65 29 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6d 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: \|\|arguments[2],r=this.events.get(e);r\|\|(r=new fs(e),this.events.set(e,r)),r.addListener(t,n)}},{key:"off",value:function(e,t){var n=this.events.get(e);n&&(n.removeListener(t),0===n.listeners.length&&this.events.delete(e))}},{key:"emit",value:function(e,t,
2024-05-21 09:22:36 UTC	5031	IN	Data Raw: 48 63 28 65 2c 5b 7b 6b 65 79 3a 22 67 65 74 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 5b 65 5d 7d 7d 2c 7b 6b 65 79 3a 22 69 73 54 72 61 63 6b 69 6e 67 45 6e 61 62 6c 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 56 61 6c 75 65 28 65 29 3b 72 65 74 75 72 6e 20 57 63 28 74 29 26 26 7a 63 28 74 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 72 61 63 6b 69 6e 67 55 72 6c 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 56 61 6c 75 65 28 65 29 3b 72 65 74 75 72 6e 20 4b 63 28 74 68 69 73 2e 6d 6e 65 74 54 72 61 63 6b 69 6e 67 55 72 6c 29 26 26 74 2e 70 75 73 68 Data Ascii: Hc(e,[{key:"getValue",value:function(e){return this.config[e]}},{key:"isTrackingEnabled",value:function(e){var t=this.getValue(e);return Wc(t)&&zc(t)}},{key:"getTrackingUrls",value:function(e){var t=this.getValue(e);return Kc(this.mnetTrackingUrl)&&t.push

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.9	52075	142.250.185.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:36 UTC	792	OUT	GET /ads/measurement/l?ebcid=ALh7CaTs-8X9fq-mOY8SlvySWm8Tolu2xtgpBGMMDsFchGO5GgWkD329H0yUtfgZIjuwefrE9jRmkdwoWotKi-kpsWjhoOVplQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:37 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 21 May 2024 09:22:36 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.9	52084	192.0.77.2	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:36 UTC	603	OUT	GET /149837791.v2.pressablecdn.com/wp-content/uploads/2022/04/CryptoTab.png HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:37 UTC	218	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 21 May 2024 09:22:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-nc: EXPIRED jfk 4 Alt-Svc: h3=":443"; ma=86400
2024-05-21 09:22:37 UTC	98	IN	Data Raw: 35 37 0d 0a 57 65 20 63 61 6e 6e 6f 74 20 63 6f 6d 70 6c 65 74 65 20 74 68 69 73 20 72 65 71 75 65 73 74 2c 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 20 72 65 74 75 72 6e 65 64 20 61 6e 20 75 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 75 73 20 63 6f 64 65 20 28 35 30 30 29 0d 0a 30 0d 0a 0d 0a Data Ascii: 57We cannot complete this request, remote server returned an unexpected status code (500)0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.9	52089	188.114.96.3	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	1455	OUT	GET /static-res/img/newsike/favicon-96x96.png?id=98b4072dae559862b5fc HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283348.0.0.0
2024-05-21 09:22:37 UTC	619	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:37 GMT Content-Type: image/png Content-Length: 2304 Connection: close CF-Cache-Status: EXPIRED Last-Modified: Tue, 21 May 2024 07:17:17 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wnbTy9QI8er90FB6gz7%2F1M4vsGFDDhancjN9zdARgfKjGLsadZ4Z9umPZvp93XCeJNynJ5mT8dBwM2TdkREQOdixWj2V6DItqVd0o3I2zYVolhB4l7qgdgycH8RFNa0eqVnCXDpo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887380c5e824c3eb-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:37 UTC	750	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 a1 50 4c 54 45 00 00 00 02 b9 2c 02 b8 2e 02 b8 2b 01 bb 2c 02 b9 25 02 b9 2d 02 ca 2c 02 b9 29 02 b9 24 01 b9 2c 02 b8 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 Data Ascii: PNGIHDR``FgAMAa cHRMz&u0`:pQ<PLTE,.+,%-,)$,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
2024-05-21 09:22:37 UTC	1369	IN	Data Raw: 7d b8 21 d2 d8 84 1a 35 35 46 1a c2 f5 a1 ba 60 c0 91 07 14 45 3d cd 2d ad 3e a4 c8 d7 da d2 dc 16 3d 65 d7 03 02 ed 1d 9d b1 2e 34 55 57 ac b3 a3 dd 56 18 10 88 77 f7 f4 22 83 7a 7b ba e3 dc 16 70 ba af 7f 60 90 05 af 68 70 a0 bf ef 34 8f 45 b1 6b 68 38 ec 63 c5 ab 6f 23 3c 3c e4 2a 66 6e fe 48 c2 3b ca 83 57 34 ea 4d 8c 30 06 01 e7 92 a9 26 5e be dc 73 53 c9 73 2c 0e 00 f1 f4 18 3f 5e d1 58 3a 6e fd e9 41 60 fc bc df 1e 1f d1 7f 7e dc aa 3b c1 c4 64 ca 2e 5e 51 6a 72 c2 d4 01 dc a1 98 13 3e 62 2c e4 36 71 80 a9 e9 19 67 7c c4 99 e9 29 a0 b7 7f 7a d6 29 1f 71 76 9a 16 03 4c 24 1d b7 5f 8d 21 64 fc 1e 60 6e d2 61 fe 0f 15 9b 9c 33 70 00 18 77 d4 7f b4 4a 8d 9f fc 1e 4a 20 3e 5f 28 3e e2 7c 1c 4a f2 03 18 4a 5f 28 9c c1 85 f4 50 5e 08 10 48 46 0a c7 47 8c Data Ascii: }!55F`E=->=e.4UWVw"z{p`hp4Ekh8co#<<*fnH;W4M0&^sSs,?^X:nA`~;d.^Qjr>b,6qg\|)z)qvL$_!d`na3pwJJ >_(>\|JJ_(P^HFG
2024-05-21 09:22:37 UTC	185	IN	Data Raw: 69 6d 61 67 65 2f 70 6e 67 3f b2 56 4e 00 00 00 17 74 45 58 74 54 68 75 6d 62 3a 3a 4d 54 69 6d 65 00 31 36 38 38 34 30 34 31 36 37 3f 0a a7 e2 00 00 00 0f 74 45 58 74 54 68 75 6d 62 3a 3a 53 69 7a 65 00 30 42 42 94 a2 3e ec 00 00 00 56 74 45 58 74 54 68 75 6d 62 3a 3a 55 52 49 00 66 69 6c 65 3a 2f 2f 2f 6d 6e 74 6c 6f 67 2f 66 61 76 69 63 6f 6e 73 2f 32 30 32 33 2d 30 37 2d 30 33 2f 31 62 37 64 30 33 36 33 32 30 65 36 39 33 30 36 63 64 35 62 62 36 65 61 38 62 32 63 62 39 64 65 2e 69 63 6f 2e 70 6e 67 b5 73 9e 79 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: image/png?VNtEXtThumb::MTime1688404167?tEXtThumb::Size0BB>VtEXtThumb::URIfile:///mntlog/favicons/2023-07-03/1b7d036320e69306cd5bb6ea8b2cb9de.ico.pngsyIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.9	52092	185.255.84.151	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	968	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-0&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926 HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1676 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:37 UTC	1676	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 33 32 36 30 62 32 35 38 35 39 61 38 63 37 32 66 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 38 34 30 63 66 35 62 34 2d 37 63 36 30 2d 34 30 34 36 2d 38 65 62 35 2d 61 37 31 31 33 39 31 38 37 64 65 64 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"3260b25859a8c72f":{"PlacementID":"ffd2f3e5d8d521d3e956b94b85e3cf84","TransactionID":"840cf5b4-7c60-4046-8eb5-a71139187ded","Width":300,"Height":250,"AvailableSizes":"300x250","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:22:37 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:37 GMT content-length: 181 x-envoy-upstream-service-time: 164 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:37 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 35 35 39 66 64 36 31 37 32 32 63 37 66 64 61 65 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 65 39 35 36 62 39 34 62 38 35 65 33 63 66 38 34 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 35 35 39 66 64 36 31 37 32 32 63 37 66 64 61 65 66 66 64 32 66 33 65 35 64 38 64 35 32 31 64 33 22 2c 22 42 69 64 49 44 22 3a 22 33 32 36 30 62 32 35 38 35 39 61 38 63 37 32 66 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"559fd61722c7fdaeffd2f3e5d8d521d3","Placement":"ffd2f3e5d8d521d3e956b94b85e3cf84","CreativeID":"559fd61722c7fdaeffd2f3e5d8d521d3","BidID":"3260b25859a8c72f"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.9	51128	54.77.79.252	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	791	OUT	GET /usync/amzns2s?r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dgg.com%26id%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b
2024-05-21 09:22:37 UTC	216	IN	HTTP/1.1 200 Date: Tue, 21 May 2024 09:22:37 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2918 Connection: close Server: nginx ETag: "065580c52fd35aa64d800ace4fbf98631" Timing-Allow-Origin: *
2024-05-21 09:22:37 UTC	2918	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 65 5f 34 64 64 35 30 61 31 31 2d 61 37 63 61 2d 34 39 30 34 2d 38 66 35 66 2d 36 32 32 33 32 65 34 37 39 63 35 62 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.9	52096	145.40.97.66	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	1251	OUT	GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CtcCShNjdXN0b21tYXBwb3N0ZXIuY29tUgthYXMtZTRmMGM1OFoIcGJhMS4zLjRqE2N1c3RvbW1hcHBvc3Rlci5jb236AQY4LjQ2LjDoAgGIA5vPsbIGqAM06gMkYThlOTg0NTAtNjBmNy00MmViLTkxYzUtNTM3ZTIzYmQ1YWQxogRiaHR0cHM6Ly9jdXN0b21tYXBwb3N0ZXIuY29tL2FydGljbGUvdG9wLzkyNiN0b2MtMWh0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9hcnRpY2xlL3RvcC85MjYjdG9jLTKqBANJU1CyBQNVU0TqBQdkZXNrdG9w-gUDYW020gYgNEM0ODIxOTM1RTY5RTc5ODRCRDJFQTBDRjc2NTBGQ0OqBwN3ZWLKBxNjdXN0b21tYXBwb3N0ZXIuY29t4AcBgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:22:37 UTC	278	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2324 content-type: text/html; charset=utf-8 date: Tue, 21 May 2024 09:22:37 GMT server: envoy vary: accept-encoding, Accept-Encoding x-envoy-upstream-service-time: 6 connection: close
2024-05-21 09:22:37 UTC	2324	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.9	52094	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	791	OUT	GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4 HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:37 UTC	488	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: text/html; charset=UTF-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:37 GMT x-envoy-upstream-service-time: 6 server: ayl-lb-fra02 connection: close transfer-encoding: chunked
2024-05-21 09:22:37 UTC	5609	IN	Data Raw: 31 35 64 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 32 46 76 69 73 69 74 6f 72 25 32 46 73 79 6e 63 25 33 46 6e 61 6d 65 25 33 44 58 61 6e 64 72 25 32 42 25 32 35 45 32 25 32 35 38 30 25 32 35 39 33 25 32 42 49 6e 76 65 73 74 25 32 42 44 53 50 25 32 36 74 74 6c 25 33 44 37 32 30 25 32 36 75 69 64 25 33 44 34 38 64 35 37 31 33 64 35 63 35 36 33 63 62 61 32 30 34 39 66 35 30 35 Data Ascii: 15dc<html><head><title></title></head><body><img style="display:none;" src="https://secure.adnxs.com/getuid?https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cba2049f505

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.9	52135	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	1445	OUT	GET /hbx/himp?_e=Cv8DIgoya3d5ZmttcnM4MRpXt9UHndc_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_oFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AfkydbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&M=13&cn3=0&c4=native_dom&C=no_res&m=b%3A0&e=&sw=160&sh=870&rr=no_res&rw=160&rh=870&rer=&dr=0&lng=en-US&cv=use2-%2Fc.js HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:22:37 UTC	156	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:37 GMT Connection: close cache-control: max-age=0, private, must-revalidate server: MonetEngine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.9	52118	54.80.58.6	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	636	OUT	GET /tag/?id=146941&user_id=c0c42e7a5092458e842e7a5092558e63 HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:37 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Tue, 21 May 2024 09:22:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-05-21 09:22:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.9	52119	52.208.36.168	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	1143	OUT	GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2t1ZWV6cnRiOjMwMHgyNTA=&v=5&s=v31hud7bado&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjk2ODM0NjIsImwiOjU1Mjg5NjU2NjMsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREkuRiIsInkiOjAsImNvIjowLCJzIjoibW10LTQzNDFlYjhhLWNhZGEtNGQwYS05ZmMxLWZlMGZlNjRmNTg1Zl8xXzFfYWQifX0%3D&cb=9592539&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwydDFaV1Y2Y25SaU9qTXdNSGd5TlRBPSIsIndkIjp7ImsuaGJfYmlkZGVyIjoia3VlZXpydGIiLCJrLmhiX3NpemUiOiIzMDB4MjUwIn0sIndyIjo0MH0= HTTP/1.1 Host: protected-by.clarium.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:37 UTC	280	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:37 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx/1.18.0 (Ubuntu) Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Pragma: no-cache Expires: Sat, 26 Jul 1997 05:00:00 GMT
2024-05-21 09:22:37 UTC	74	IN	Data Raw: 34 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 18 57 63 60 60 00 00 00 03 00 01 68 26 59 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 44PNGIHDRIDATWc``h&YIENDB`
2024-05-21 09:22:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.9	52155	64.74.236.223	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	845	OUT	GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_NATIVE_1_2%26ttl%3D720%26uid%3Df2d9136cf53dede7f83ba16171a37fdd%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=TZvXYgcPoPgLT8-WUnBN
2024-05-21 09:22:38 UTC	690	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 215 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://visitor.omnitagjs.com/visitor/sync?name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=TZvXYgcPoPgLT8-WUnBN&gdpr=0&gdpr_consent=&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=TZvXYgcPoPgLT8-WUnBN; Path=/; Domain=zemanta.com; Expires=Wed, 21 May 2025 09:22:37 GMT; Max-Age=31536000; Secure; SameSite=None Date: Tue, 21 May 2024 09:22:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-21 09:22:38 UTC	215	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 73 79 6e 63 3f 6e 61 6d 65 3d 5a 45 4d 41 4e 54 41 5f 4e 41 54 49 56 45 5f 31 5f 32 26 61 6d 70 3b 74 74 6c 3d 37 32 30 26 61 6d 70 3b 75 69 64 3d 66 32 64 39 31 33 36 63 66 35 33 64 65 64 65 37 66 38 33 62 61 31 36 31 37 31 61 33 37 66 64 64 26 61 6d 70 3b 76 69 73 69 74 6f 72 3d 54 5a 76 58 59 67 63 50 6f 50 67 4c 54 38 2d 57 55 6e 42 4e 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://visitor.omnitagjs.com/visitor/sync?name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=TZvXYgcPoPgLT8-WUnBN&gdpr=0&gdpr_consent=&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.9	52181	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	1625	OUT	GET /hbx/himp?_e=CvoEIgtfMmt3eWZrbXJzODGAgosVNRjiPzoIYXBwbmV4dXNCGDYzN2E1MjZjMWFjNjQyNzQ0ODZmMDhkNEoTY3VzdG9tbWFwcG9zdGVyLmNvbVILYWFzLWU0ZjBjNThqE2N1c3RvbW1hcHBvc3Rlci5jb214AYoBCGQ1N2YyZTAyoAHYBKgBoAHAAe_2C8gBANABA-gBAPIBDzg0ODcxMzAwOTcwOTIzMpECGle31Qed1z-YApYsoQKAgosVNRjiP6kCAAAAAAAAAACyAgxhaXJmcmFuY2UudXO6Agk1MDA3NDA5ODfCAgQyNjQx2gIIMjE4NDAwODDxAgAAAAAAAAAA-QIAAAAAAAAAAJoDJDAwMDA5YWNlLWJmMjctZTBhMC04N2MzLTI1MGVlYWM1NDcwMaIDDlpHbHpjWFZ6TG1OdmJRqAM0wgMBMMoDBDI2NDHgA8iPAeoDI2ExYjlkYzJmNDE0Yy01ZjA2LWYyMTItZDEzNDM4NGQ2NzQ5-QNLQ2hlw5o4QKIEK2h0dHBzOi8vY3VzdG9tbWFwcG9zdGVyLmNvbS9hcnRpY2xlL3RvcC85MjaqBANJU1CCBRI4Mzg1MDkwNzQ5Nzk4ODk0NDiKBQExsgUDVVNEwgUBMsoFBDIxNjfSBQkxMDUxOTk0MDHYBQHgBQDqBQdkZXNrdG9w8gUNMU85UFc4VFRSMlZQQ_oFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AfkydbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&gdpr=0&gpp_sid=&M=13&cn3=0&c4=native_dom&C=no_res&m=b%3A0&e=&sw=160&sh=870&rr=no_res&rw=160&rh=870&rer=&dr=0&lng=en-US&cv=use2-%2Fc.js HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:22:38 UTC	156	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:37 GMT Connection: close cache-control: max-age=0, private, must-revalidate server: MonetEngine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.9	52143	192.0.77.39	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	593	OUT	GET /wp-content/uploads/2022/04/CryptoTab.png HTTP/1.1 Host: 149837791.v2.pressablecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:38 UTC	203	IN	HTTP/1.1 500 Internal Server Error Server: nginx Date: Tue, 21 May 2024 09:22:37 GMT Content-Type: text/html Content-Length: 572 Connection: close Alt-Svc: h3=":443"; ma=86400 X-nc: MISS jfk 1
2024-05-21 09:22:38 UTC	572	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.9	52164	52.208.36.168	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:37 UTC	1143	OUT	GET /pixel?tag=wt_T09oM2JUcnRiMm5IeU93R2syTFRPNVNXbzU0L2t1ZWV6cnRiOjE2MHg2MDA=&v=5&s=v31hud7b9tm&id=eyJkZnAiOnsiYWQiOjM5MDYyNDk2LCJjIjoxMzgzMjk2ODM0NTYsImwiOjU1Mjg5NjU2NjMsIm8iOjI3NzE5NjAxMzQsIkEiOiIvMjA4NDI1NzYsMjMwNzgyNTg2MDMvS0pJMDFNL0tKSTAxTS1EREkuRiIsInkiOjAsImNvIjowLCJzIjoibW10LTQ4MTQ4MzY2LWI4YjQtNDRkYS04ZTdlLTBiZDNiZDI4ZTlmMF8xXzFfYWQifX0%3D&cb=5956302&h=custommapposter.com&d=eyJ3aCI6IlQwOW9NMkpVY25SaU1tNUllVTkzUjJzeVRGUlBOVk5YYnpVMEwydDFaV1Y2Y25SaU9qRTJNSGcyTURBPSIsIndkIjp7ImsuaGJfYmlkZGVyIjoia3VlZXpydGIiLCJrLmhiX3NpemUiOiIxNjB4NjAwIn0sIndyIjo0MH0= HTTP/1.1 Host: protected-by.clarium.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:38 UTC	280	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:38 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: nginx/1.18.0 (Ubuntu) Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Pragma: no-cache Expires: Sat, 26 Jul 1997 05:00:00 GMT
2024-05-21 09:22:38 UTC	74	IN	Data Raw: 34 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 18 57 63 60 60 00 00 00 03 00 01 68 26 59 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 44PNGIHDRIDATWc``h&YIENDB`
2024-05-21 09:22:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.9	52196	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:38 UTC	861	OUT	GET /visitor/bsync?uid=ee28081dc141859df3e9c39bf89f63cf&name=AMAZON&url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dadyoulike.com%26id%3D%7BuserId%7D HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:38 UTC	601	IN	HTTP/1.1 307 Temporary Redirect cache-control: no-cache, no-store, must-revalidate content-type: text/html; charset=UTF-8 expires: 0 location: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=adyoulike.com&id=46e59d222a7a2903202481b6faf17935 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:37 GMT content-length: 0 x-envoy-upstream-service-time: 0 server: ayl-lb-fra02 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.9	52214	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:38 UTC	1641	OUT	GET /hbx/himp?_e=CoYFIgtfMmt3eWZrbXJzODGbVZ-rrVjiPzoIYXBwbmV4dXNCGDYzN2E1MjZjMWFjNjQyNzQ0ODZmMDhkNEoTY3VzdG9tbWFwcG9zdGVyLmNvbVILYWFzLWU0ZjBjNThqE2N1c3RvbW1hcHBvc3Rlci5jb214AYoBCGQ1N2YyZTAyoAH6AagBrALAAe_2C8gBANABA-gBAPIBDzE2NjA4NzQwNTIwNDAwN5ECoiHjUSrx1z-YAuUsoQKbVZ-rrVjiP6kCAAAAAAAAAACyAhFnZW5lcmFsc2VhcmNoLm5ldLoCCTQ1MDA0MzQ5MMICBTExODgy2gIIMjE4NDAwODDxAgAAAAAAAAAA-QIAAAAAAAAAAJoDJDAwMDA5YWNlLWJmMjctZTBhMC04N2MzLTI1MGVlYWM1NDcwMaIDDlpHbHpjWFZ6TG1OdmJRqAM0wgMBMMoDBTExODgy4APIjwHqAyNkYWI4ZDY3MzNhODgtNzU1NS02YmU0LWY4YWQ3ZGVkZDFjNfkDS0NoZcOaOECiBCtodHRwczovL2N1c3RvbW1hcHBvc3Rlci5jb20vYXJ0aWNsZS90b3AvOTI2qgQDSVNQggUTODc1MzUzMzA1NDI5MTk2NzE0MooFATGyBQNVU0TCBQM0ODDKBQcxMjE1ODc30gUJMTA1MTk5NDAx2AUB4AUA6gUHZGVza3RvcPIFDFE2U0RFUlZLQkRBOPoFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AeT0NbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&gdpr=0&gpp_sid=&M=13&cn3=0&c4=native_dom&C=no_res&m=b%3A0&e=&sw=300&sh=450&rr=no_res&rw=300&rh=450&rer=&dr=0&lng=en-US&cv=use2-%2Fc.js HTTP/ [TRUNCATED] Host: 1x1.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:22:38 UTC	156	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:38 GMT Connection: close cache-control: max-age=0, private, must-revalidate server: MonetEngine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.9	52224	81.17.55.122	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:38 UTC	859	OUT	GET /api/sync?callerId=22&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5439263188312224104; csync=80:NYIIHzWDXR4u1V9IYYQRSTOCDxgugw9OZdEdxVFz\|130:3d12ee56-7200-483f-ad58-25321367cbba
2024-05-21 09:22:38 UTC	142	IN	HTTP/1.1 404 Not Found date: Tue, 21 May 2024 09:22:37 GMT content-type: text/plain; charset=utf-8 content-length: 9 connection: close
2024-05-21 09:22:38 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.9	52215	3.75.62.37	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:38 UTC	773	OUT	GET /ups/58570/occ?uid=179b87ae-9f2f-46eb-82c4-75c95ef3faa4 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; IDSYNC="18z8~2ijl:19cy~2ijl"
2024-05-21 09:22:38 UTC	742	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:38 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ijl:19cy~2ijl:196y~2ijl";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 21-May-2025 09:22:38 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://prebid.a-mo.net/setuid/yahoo?uid=y-fBEpeGJE2uFK8wxijILCuZesa3mPWMg9pr2bap8-~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBLBnTGYCEDCbsEkgg3zbR6gQQ8DpXXgFEgEBAQG5TWZWZtwr0iMA_eMAAA&S=AQAAApqvzbQeG3i6V_M9snNGuMk; Expires=Wed, 21 May 2025 15:22:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.9	52250	185.255.84.153	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:38 UTC	778	OUT	GET /visitor/sync?name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=TZvXYgcPoPgLT8-WUnBN&gdpr=0&gdpr_consent=&gdpr=0 HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:39 UTC	465	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: image/gif expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:38 GMT content-length: 49 x-envoy-upstream-service-time: 1 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:39 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 ff ff ff ff ff ff fe 01 02 00 00 00 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.9	52294	140.82.63.115	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:38 UTC	1329	OUT	POST /aggregate_beacon HTTP/1.1 Host: bisrtb.cootlogix.com Connection: keep-alive Content-Length: 15294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=yFW13aiZlTLyyLlR8ZGksqDSY4Fxw%2BH3ACAUNcPF8xeElBdQ8wD20AX2pcZXsaGnhZNgx4TUtvCmd5ShwqWjYPblVYOVxkfU4dLwllWz5DRXhaYHtPSXRcZ1o8VFhoDWMvH0B6WmILb1BLdk5if0tILlxrDm1QWGJYYXQaSHVdZllvVFx4QHZ6Sx8pWWVbOAUPbV4weExKdF1hDG9QWTtOeG5MH39ZYV1oWQ1tWGB9Gkl8XWVcOQReOQ52YFtPf1s3CWhTW2tUZSkbG30IYQ1vVQtrDmNuVVt6X2ZdY1lZbg42fxodeg83XGhRCmlbYS5bVW5aZw08VVFvX2J8Txh9DWAPYgVdbQ1keEBbEUBwWzUUBy5ObnxVWysIIkp4WxJ4BScJLFt2CjNUKQRFeAswPAtbdk5iGnZDDj4cJg8WFz8JPEx4W0t4QHY5Cik%2BBSRZORhLYE52MVVbPwkhSzMOB3hWdnodSXhZMwBjTA1vD2VhTkp1CX9dYlgNd15idRoYew40DmIFXXhAdi8WFyIJMUwzDgcTCHZ2W09%2FWzcOb1VfPgk3LkFLKFhnCmlXD2oKbG5VWyUfG14oAAQ%2FTm44CwwpEQ%3D%3D
2024-05-21 09:22:38 UTC	15294	OUT	Data Raw: 7b 22 74 72 61 63 65 22 3a 22 6c 71 76 31 35 49 4b 43 54 41 7a 54 62 4d 71 4f 53 4c 69 42 4d 6d 6b 6d 49 69 51 55 49 42 46 76 53 78 51 6f 62 68 77 78 4c 44 6b 4b 4d 47 4e 41 64 6c 52 25 32 46 45 69 70 6b 4c 56 6b 68 4c 53 39 79 59 58 46 44 62 56 64 25 32 42 52 53 34 32 65 51 78 30 66 32 6c 76 64 69 38 62 4f 51 64 76 53 32 30 79 4b 44 6f 32 4b 44 6b 33 64 6d 31 59 4f 78 46 76 53 32 30 45 4a 51 63 6d 4a 6a 77 77 64 6d 31 59 4e 68 41 69 42 6a 77 32 50 6b 74 34 61 77 67 72 4a 69 34 58 4d 54 31 38 51 48 68 78 59 45 73 68 4a 6a 34 74 49 44 4d 44 64 6c 68 76 4a 42 78 78 59 45 73 6d 4c 44 30 71 4e 79 52 59 62 6b 41 70 55 32 4e 78 4c 77 67 76 4f 53 6f 71 4d 79 39 59 62 6b 42 76 58 57 30 6c 4b 52 73 32 49 43 67 69 4f 47 4e 41 64 68 49 68 45 44 73 31 49 78 73 76 61 Data Ascii: {"trace":"lqv15IKCTAzTbMqOSLiBMmkmIiQUIBFvSxQobhwxLDkKMGNAdlR%2FEipkLVkhLS9yYXFDbVd%2BRS42eQx0f2lvdi8bOQdvS20yKDo2KDk3dm1YOxFvS20EJQcmJjwwdm1YNhAiBjw2Pkt4awgrJi4XMT18QHhxYEshJj4tIDMDdlhvJBxxYEsmLD0qNyRYbkApU2NxLwgvOSoqMy9YbkBvXW0lKRs2ICgiOGNAdhIhEDs1Ixsva
2024-05-21 09:22:38 UTC	300	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: * p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" content-type: text/plain content-length: 0 date: Tue, 21 May 2024 09:22:38 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.9	52304	44.193.116.123	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:38 UTC	1742	OUT	GET /hbx/inde?aid=Y3VzdG9tbWFwcG9zdGVyLmNvbQ&b=custommapposter.com&M=13&v=pba0.0-aa2.15.0-ffc8736-0&cv=use2-%2Fc.js&lng=en-US&_e=CoYFIgtfMmt3eWZrbXJzODGbVZ-rrVjiPzoIYXBwbmV4dXNCGDYzN2E1MjZjMWFjNjQyNzQ0ODZmMDhkNEoTY3VzdG9tbWFwcG9zdGVyLmNvbVILYWFzLWU0ZjBjNThqE2N1c3RvbW1hcHBvc3Rlci5jb214AYoBCGQ1N2YyZTAyoAH6AagBrALAAe_2C8gBANABA-gBAPIBDzE2NjA4NzQwNTIwNDAwN5ECoiHjUSrx1z-YAuUsoQKbVZ-rrVjiP6kCAAAAAAAAAACyAhFnZW5lcmFsc2VhcmNoLm5ldLoCCTQ1MDA0MzQ5MMICBTExODgy2gIIMjE4NDAwODDxAgAAAAAAAAAA-QIAAAAAAAAAAJoDJDAwMDA5YWNlLWJmMjctZTBhMC04N2MzLTI1MGVlYWM1NDcwMaIDDlpHbHpjWFZ6TG1OdmJRqAM0wgMBMMoDBTExODgy4APIjwHqAyNkYWI4ZDY3MzNhODgtNzU1NS02YmU0LWY4YWQ3ZGVkZDFjNfkDS0NoZcOaOECiBCtodHRwczovL2N1c3RvbW1hcHBvc3Rlci5jb20vYXJ0aWNsZS90b3AvOTI2qgQDSVNQggUTODc1MzUzMzA1NDI5MTk2NzE0MooFATGyBQNVU0TCBQM0ODDKBQcxMjE1ODc30gUJMTA1MTk5NDAx2AUB4AUA6gUHZGVza3RvcPIFDFE2U0RFUlZLQkRBOPoFBGRjMTPSBiA0QzQ4MjE5MzVFNjlFNzk4NEJEMkVBMENGNzY1MEZDQ6oHBHNpdGXKBxNjdXN0b21tYXBwb3N0ZXIuY29t0AeT0NbT-THYB6wC4AcCgggTY3VzdG9tbWFwcG9zdGVyLmNvbQ&gdpr=0&gpp_sid=&C=no_res&m=b [TRUNCATED] Host: 1x1.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=179b87ae-9f2f-46eb-82c4-75c95ef3faa4
2024-05-21 09:22:39 UTC	156	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:39 GMT Connection: close cache-control: max-age=0, private, must-revalidate server: MonetEngine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.9	52297	15.197.193.217	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:39 UTC	752	OUT	GET /track/cmf/generic?ttd_pid=k2j3gqp&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; TDCPM=CAEYASABKAIyCwjK2JjExuD8PBAFOAFaB2YwdjM1ZXdgAg..
2024-05-21 09:22:39 UTC	575	IN	HTTP/1.1 302 Found Date: Tue, 21 May 2024 09:22:39 GMT Content-Length: 319 Connection: close server: Kestrel location: https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&name=THE_TRADE_DESK set-cookie: TDID=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c; expires=Wed, 21 May 2025 09:22:39 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwiopNilyeD8PBAFOAFaB2syajNncXBgAg..; expires=Wed, 21 May 2025 09:22:39 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-21 09:22:39 UTC	319	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 73 79 6e 63 3f 75 69 64 3d 38 31 32 32 66 64 61 63 36 30 35 31 37 62 31 65 66 65 31 33 38 39 36 31 32 66 33 64 66 62 33 34 26 76 69 73 69 74 6f 72 3d 64 37 63 35 38 39 66 61 2d 32 34 38 62 2d 34 32 65 30 2d 38 62 63 34 2d 66 66 62 34 62 64 63 33 33 64 35 63 26 6e 61 6d 65 3d 54 48 45 5f 54 52 41 44 45 5f 44 45 53 4b 22 3e 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 73 79 6e 63 3f 75 69 64 3d 38 31 32 32 66 64 61 63 36 30 35 31 37 62 31 65 66 65 31 33 38 39 36 31 32 66 33 64 66 62 33 34 26 76 69 73 69 Data Ascii: Redirecting to: <a href="https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c&name=THE_TRADE_DESK">https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.9	52310	140.82.63.115	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:39 UTC	1329	OUT	POST /aggregate_beacon HTTP/1.1 Host: bisrtb.cootlogix.com Connection: keep-alive Content-Length: 14959 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=9be2d69e-2334-ddbd-ba87-ee019be49ba6; vdzj1_3646a4db=yFW13aiZlTLyyLlR8ZGksqDSY4Fxw%2BH3ACAUNcPF8xeElBdQ8wD20AX2pcZXsaGnhZNgx4TUtvCmd5ShwqWjYPblVYOVxkfU4dLwllWz5DRXhaYHtPSXRcZ1o8VFhoDWMvH0B6WmILb1BLdk5if0tILlxrDm1QWGJYYXQaSHVdZllvVFx4QHZ6Sx8pWWVbOAUPbV4weExKdF1hDG9QWTtOeG5MH39ZYV1oWQ1tWGB9Gkl8XWVcOQReOQ52YFtPf1s3CWhTW2tUZSkbG30IYQ1vVQtrDmNuVVt6X2ZdY1lZbg42fxodeg83XGhRCmlbYS5bVW5aZw08VVFvX2J8Txh9DWAPYgVdbQ1keEBbEUBwWzUUBy5ObnxVWysIIkp4WxJ4BScJLFt2CjNUKQRFeAswPAtbdk5iGnZDDj4cJg8WFz8JPEx4W0t4QHY5Cik%2BBSRZORhLYE52MVVbPwkhSzMOB3hWdnodSXhZMwBjTA1vD2VhTkp1CX9dYlgNd15idRoYew40DmIFXXhAdi8WFyIJMUwzDgcTCHZ2W09%2FWzcOb1VfPgk3LkFLKFhnCmlXD2oKbG5VWyUfG14oAAQ%2FTm44CwwpEQ%3D%3D
2024-05-21 09:22:39 UTC	14959	OUT	Data Raw: 7b 22 74 72 61 63 65 22 3a 22 65 78 37 31 34 42 63 39 63 70 78 76 50 50 74 61 5a 75 61 4f 55 46 63 46 52 55 57 41 69 4e 79 54 6a 6f 68 56 78 51 78 42 6b 73 71 46 46 70 4d 63 6d 5a 47 41 6a 39 43 41 48 49 41 58 51 64 42 54 55 5a 70 61 55 46 53 62 68 51 45 64 77 59 50 56 56 4a 55 56 44 34 78 47 51 52 34 54 30 4d 6a 42 32 6f 58 45 51 6f 43 63 6e 78 57 44 69 6c 58 57 32 41 30 55 41 30 55 46 77 45 6a 63 6c 68 44 4f 41 63 4f 4e 52 42 63 45 56 4a 43 56 42 4d 34 42 67 34 33 45 44 35 7a 55 67 35 42 58 46 6f 56 50 79 55 61 46 53 67 4d 51 33 68 42 62 44 42 53 56 46 51 30 4e 51 49 49 4f 52 42 44 65 45 46 64 51 56 78 61 46 54 45 39 42 41 41 7a 45 67 39 67 57 52 74 42 58 46 6f 41 4e 53 49 41 43 44 6b 55 44 57 42 5a 47 78 4d 63 47 51 49 32 50 77 59 4d 65 46 6c 44 4a 67 Data Ascii: {"trace":"ex714Bc9cpxvPPtaZuaOUFcFRUWAiNyTjohVxQxBksqFFpMcmZGAj9CAHIAXQdBTUZpaUFSbhQEdwYPVVJUVD4xGQR4T0MjB2oXEQoCcnxWDilXW2A0UA0UFwEjclhDOAcONRBcEVJCVBM4Bg43ED5zUg5BXFoVPyUaFSgMQ3hBbDBSVFQ0NQIIORBDeEFdQVxaFTE9BAAzEg9gWRtBXFoANSIACDkUDWBZGxMcGQI2PwYMeFlDJg
2024-05-21 09:22:39 UTC	300	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: * p3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" content-type: text/plain content-length: 0 date: Tue, 21 May 2024 09:22:39 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.9	52319	23.212.88.20	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:39 UTC	3392	OUT	GET /bping.php?vgd_len=2772&&vgd_cdv=1233&vgd_cage=0&vgd_tsce=L506&vgd_mcf=76464&gdpr=0&mspa=0&wshp=0&prid=8PRVCXX19&cid=8CU566D6F&crid=825350222&vi=1716283355410027155&ugd=4&lf=6&cc=US&sc=NJ&vsid=3592849466404713&lper=100&wsip=170785092&r=1716283354983&rrr=tzR-hLcl-L-pgrSUQEHlWKlhFVHT_7Sms8nRFgPS-pV-VbyHGus50MPWlIHRoMIV&requrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-1https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926%23toc-2&vgde_bdata=QOfvzxjj~8xLjMjvf9~e8fXvfF~myJLEYv9.ih~OmYMGv9.AF~QNOvz5~L1Jv9%2C9%2Cou~OmYMjvf9~ejfLMQOvf9fH9Xfu9f~8xLjMGvih9.FA~xLjM7UNv9~xLjMLf1MGv9~Q7OvfuWH99W9~L17v9.999%2C9~8Eviwp4k~kGGv9~L88Ex1v9%2C9~LNvF%2CAfXH~Y78Ov0a9999fX~L8Qx8Ov9%2C9~LEQMQOvf9fH9Xfu9H~L1Oev9.999%2C9~xLjMGvu.9A~ejfLMxLjMGv9~QYYMBLvF.9ffA~xLjMjvf9~QjevFu.9X~yN17vX9uH9f~OGQ8Ov0r9u9~GGvuAX~QYYMYxjv9.hA~JLEYv9.ih~ejfLMxLjMUNv949~EQ8MNvXiFf99~GYvu~LUJv9%2C9%2Cou~1AEMGvfu.ii%2CiH.Wu~QOv9~LMBLMGvHWF.FH%2C9~x8OvAAiidcf3quLsPBVQbl~NejfLMGvXh.WF~G7OvXAf9iWH9fWF9uWFFhfAXuWuXAWuiXfWhHfAX9hX9uWXAXWA9X [TRUNCATED] Host: lg3.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3592849466404713000V10
2024-05-21 09:22:39 UTC	328	IN	HTTP/1.1 200 OK Content-Length: 35 Content-Type: image/gif Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=21600 Alt-Svc: h3=":443"; ma=93600 Expires: Tue, 21 May 2024 09:22:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 21 May 2024 09:22:39 GMT Connection: close
2024-05-21 09:22:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.9	52322	13.32.121.81	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:39 UTC	546	OUT	GET /aax2/apstag.js HTTP/1.1 Host: d3div1mtym39ic.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:39 UTC	591	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 310033 Connection: close Date: Tue, 21 May 2024 09:20:08 GMT Last-Modified: Tue, 07 May 2024 20:29:13 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 ETag: "3b8ede3ac6facca086f5ab97663513eb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c60125e7f3465aceafb0abd071a41a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: U0i1_JrwVFUQoGaMu3V9ZhHe8Ux5m2z2mehnZ86DEJcuSz14TKbpOA== Age: 152
2024-05-21 09:22:39 UTC	15793	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 35 30 36 2e 31 35 31 39 20 2d 20 32 30 32 34 2d 30 35 2d 30 36 20 31 35 3a 31 39 3a 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.506.1519 - 2024-05-06 15:19:52 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-05-21 09:22:39 UTC	16384	IN	Data Raw: 3f 76 6f 69 64 20 30 3a 72 2e 67 70 70 53 74 72 69 6e 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 3d 72 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 22 45 3a 70 69 6e 67 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 7d 72 65 74 75 72 6e 5b 6e 2c 6f 5d 7d 28 65 29 2c 32 29 2c 74 3d 6c 5b 30 5d 2c 61 3d 6c 5b 31 5d 2c 75 3d 22 70 69 6e 67 22 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 76 3d 63 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6f 3b 74 72 79 7b 76 61 72 20 72 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 5f 5f 67 70 70 28 22 67 65 74 47 50 50 44 61 74 61 22 29 3b 65 3d 6e 28 6e 28 7b 7d 2c 72 29 2c 72 2e 70 69 6e 67 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d Data Ascii: ?void 0:r.gppString)&&void 0!==e?e:"").length>0&&(n=r)}catch(t){o="E:ping: ".concat(t)}return[n,o]}(e),2),t=l[0],a=l[1],u="ping","object"!=typeof t&&(v=c(function(t){var e,o;try{var r=t.globalContext.__gpp("getGPPData");e=n(n({},r),r.pingData)}catch(t){o=
2024-05-21 09:22:39 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 72 65 6a 65 63 74 29 29 74 72 79 7b 74 2e 64 65 74 61 69 6c 2e 72 65 6a 65 63 74 28 65 29 2c 24 28 29 26 26 58 2e 65 72 72 6f 72 28 65 29 7d 63 61 74 63 68 28 74 29 7b 58 2e 65 72 72 6f 72 28 74 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 49 6e 76 61 6c 69 64 41 63 63 6f 75 6e 74 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 61 63 63 6f 75 6e 74 20 49 44 3a 20 22 27 2e 63 6f 6e 63 61 74 28 65 2e 69 64 2c 27 22 27 29 29 3b 74 68 Data Ascii: function(t,e){var n;if(void 0!==(null===(n=t.detail)\|\|void 0===n?void 0:n.reject))try{t.detail.reject(e),$()&&X.error(e)}catch(t){X.error(t)}},t.prototype.handleInvalidAccountError=function(t,e){var n=new Error('Invalid account ID: "'.concat(e.id,'"'));th
2024-05-21 09:22:40 UTC	16384	IN	Data Raw: 74 3b 72 65 74 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 72 79 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 6f 3b 74 72 79 7b 6f 3d 74 2e 72 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 43 74 29 7d 63 61 74 63 68 28 74 29 7b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 74 68 72 6f 77 20 6e 65 77 20 78 74 28 74 29 7d 69 66 28 6e 75 6c 6c 21 3d 6f 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 6c 69 4d 6f 64 75 6c 65 45 6e 61 62 6c 65 64 26 26 28 74 2e 67 6c Data Ascii: t;return t.customEvent,r(void 0,void 0,void 0,(function(){var t;return i(this,(function(o){try{t=function(t){var e,n,o;try{o=t.readLocalStorage(Ct)}catch(t){if(t instanceof Error)throw new xt(t)}if(null!=o&&(void 0===t.globalContext.liModuleEnabled&&(t.gl
2024-05-21 09:22:40 UTC	16384	IN	Data Raw: 6c 6f 6f 72 2e 63 75 72 72 65 6e 63 79 29 2c 76 6f 69 64 20 30 21 3d 3d 74 2e 73 6c 6f 74 50 61 72 61 6d 73 26 26 28 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 2e 65 78 74 3d 74 2e 73 6c 6f 74 50 61 72 61 6d 73 29 2c 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 3d 6e 28 6e 28 7b 7d 2c 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 49 65 28 74 29 29 2c 6f 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 65 64 69 61 54 79 70 65 3d 3d 3d 77 65 2e 4d 75 6c 74 69 46 6f 72 6d 61 74 3f 65 3d 41 65 28 74 2e 6d 75 6c 74 69 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 69 65 73 2c 74 2e 63 6f 6d 70 61 6e 69 6f 6e 73 29 3a 74 2e 6d 65 64 69 61 54 79 70 65 3d 3d 3d 77 65 2e 56 69 64 65 6f 3f 28 65 2e Data Ascii: loor.currency),void 0!==t.slotParams&&(o.spec.placement.ext=t.slotParams),o.spec.placement=n(n({},o.spec.placement),Ie(t)),o},Ie=function(t){var e={};return t.mediaType===we.MultiFormat?e=Ae(t.multiFormatProperties,t.companions):t.mediaType===we.Video?(e.
2024-05-21 09:22:40 UTC	5133	IN	Data Raw: 6c 3d 3d 3d 28 75 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 70 61 69 72 65 64 45 76 65 6e 74 73 29 7c 7c 72 2e 6c 65 6e 67 74 68 3c 31 7c 7c 72 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7d 29 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 70 61 69 72 65 64 45 76 65 6e 74 73 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 61 72 72 61 79 20 6f 66 20 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 74 29 3b 65 Data Ascii: l===(u=n.detail)\|\|void 0===u?void 0:u.pairedEvents)\|\|r.length<1\|\|r.some((function(t){return"string"!=typeof t})))throw new Error("Parameter pairedEvents must be a non-empty array of string");return r.forEach((function(n){var r="".concat(n,":").concat(t);e
2024-05-21 09:22:40 UTC	16384	IN	Data Raw: 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6e 2e 73 72 63 3d 74 2c 6e 2e 61 73 79 6e 63 3d 21 30 2c 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 28 22 68 74 74 70 73 3a 2f 2f 63 2e 74 6f 6f 6c 62 6f 78 2e 61 70 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 Data Ascii: t.customEvent,r(void 0,void 0,void 0,(function(){return i(this,(function(t){return function(t,e){var n=e.globalContext.document.createElement("script");n.src=t,n.async=!0,e.globalContext.document.head.appendChild(n)}("https://c.toolbox.aps.amazon-adsyste
2024-05-21 09:22:40 UTC	16384	IN	Data Raw: 65 61 74 75 72 65 73 3a 65 2e 76 61 6c 75 65 7d 29 3b 63 61 73 65 22 53 48 4f 55 4c 44 5f 55 53 45 5f 54 45 53 54 5f 42 49 44 5f 45 4e 44 50 4f 49 4e 54 22 3a 72 65 74 75 72 6e 20 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 73 68 6f 75 6c 64 55 73 65 54 65 73 74 42 69 64 45 6e 64 70 6f 69 6e 74 3a 65 2e 76 61 6c 75 65 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 73 28 7b 7d 2c 74 29 7d 7d 28 74 2e 65 78 70 65 72 69 6d 65 6e 74 73 2c 65 29 2c 67 61 6d 53 6c 6f 74 46 65 74 63 68 4c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 4c 4f 47 5f 47 41 4d 5f 45 56 45 4e 54 22 21 3d 3d 65 2e 74 79 70 65 3f 6c 28 74 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 6c 28 74 29 2c 5b 73 28 7b 7d 2c 65 2e 65 76 65 6e 74 29 5d 29 7d 28 74 2e 67 61 6d Data Ascii: eatures:e.value});case"SHOULD_USE_TEST_BID_ENDPOINT":return s(s({},t),{},{shouldUseTestBidEndpoint:e.value});default:return s({},t)}}(t.experiments,e),gamSlotFetchLog:function(t,e){return"LOG_GAM_EVENT"!==e.type?l(t):[].concat(l(t),[s({},e.event)])}(t.gam
2024-05-21 09:22:40 UTC	16384	IN	Data Raw: 79 70 65 2c 69 2e 6b 65 79 2c 6e 75 6c 6c 2c 65 29 28 74 29 7d 29 29 2c 76 28 79 28 61 29 2c 22 72 65 6d 6f 76 65 49 74 65 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 67 75 6c 61 74 65 64 4d 65 74 68 6f 64 28 61 2e 73 74 6f 72 61 67 65 54 79 70 65 2c 69 2e 72 65 6d 6f 76 65 49 74 65 6d 2c 6e 75 6c 6c 2c 65 29 28 74 29 7d 29 29 2c 76 28 79 28 61 29 2c 22 73 65 74 49 74 65 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 67 75 6c 61 74 65 64 4d 65 74 68 6f 64 28 61 2e 73 74 6f 72 61 67 65 54 79 70 65 2c 69 2e 73 65 74 49 74 65 6d 2c 6e 75 6c 6c 2c 6e 29 28 74 2c 65 29 7d 29 29 2c 61 2e 73 74 6f 72 61 67 65 54 79 70 65 3d 6f 2c 61 7d 72 65 74 75 72 6e 20 4f 28 65 2c 5b 7b Data Ascii: ype,i.key,null,e)(t)})),v(y(a),"removeItem",(function(t,e){return a.regulatedMethod(a.storageType,i.removeItem,null,e)(t)})),v(y(a),"setItem",(function(t,e,n){return a.regulatedMethod(a.storageType,i.setItem,null,n)(t,e)})),a.storageType=o,a}return O(e,[{
2024-05-21 09:22:40 UTC	16384	IN	Data Raw: 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 2c 65 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6e 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b Data Ascii: hod.")}()}function j(t,e){var n,r=Object.keys(t);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(t),e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)),r}function S(t){for(var e=1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.9	52326	82.145.213.8	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:39 UTC	789	OUT	GET /pub/sync?pubid=pub10084465274176&gdpr=0&consent=&us_privacy= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU0580edc5dbac4778bfc19398f495dfb8
2024-05-21 09:22:39 UTC	808	IN	HTTP/1.1 302 Found Server: Tengine Date: Tue, 21 May 2024 09:22:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 181 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://sync.cootlogix.com/api/cookie?consent=&gdpr=0&gdpr_consent=&partnerId=opera&us_privacy=&userId=OPU0580edc5dbac4778bfc19398f495dfb8 Pragma: no-cache Set-Cookie: UID=OPU0580edc5dbac4778bfc19398f495dfb8; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-05-21 09:22:39 UTC	181	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 6f 6f 74 6c 6f 67 69 78 2e 63 6f 6d 2f 61 70 69 2f 63 6f 6f 6b 69 65 3f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 61 72 74 6e 65 72 49 64 3d 6f 70 65 72 61 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 75 73 65 72 49 64 3d 4f 50 55 30 35 38 30 65 64 63 35 64 62 61 63 34 37 37 38 62 66 63 31 39 33 39 38 66 34 39 35 64 66 62 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.cootlogix.com/api/cookie?consent=&gdpr=0&gdpr_consent=&partnerId=opera&us_privacy=&userId=OPU0580edc5dbac4778bfc19398f495dfb8">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.9	52337	23.212.88.20	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:39 UTC	8058	OUT	GET /clog?logid=awlog&pixel_len_bucket=7400&lper=1&itypeid=21&itype=APPNEXUS_EXPERIMENT&itype_override=APPNEXUS_EXPERIMENT&cc=US&cid=8CUH868Z4&reqid=556775042280754369&vid=556775042280754369&dn=custommapposter.com&rawDn=custommapposter.com&requrl_dn=custommapposter.com&pid=8PR113JGC&ugd=4&fleet=common-32c&requrl=https%3A%2F%2Fcustommapposter.com%2Farticle%2Ftop%2F926&cliIPType=v4&coppa_status=N&coppa_applied=N&coppa_enf=true&lmt_enf=true&dnt_status=N&dnt_enf=false&geo_source=2&sc=NY&ct=New+York&zip=10118&pubid=pub-appnexus-exp&tgtval=pub-appnexus-exp&csip=rtb-common-32c-7d7b858d67-xjvlm.OR&dtc=west_or&zone=b&ptype=23&tmax=150&xtmax=120&gdpr=0&gpp_present=false&app=0&sat=1&devbrand=Unknown&devmodel=Unknown&device_id=4&ortb_device_id=2&asn=3356&gender=O&sckfl=1&suid=2786432704245481726&sckfl2=0&smbrid=12290&cxtSgmt=long_tail_bf_apple_tech&usp_status=0&usp_enf=1&mspa_enforced=true&pexid=APPNEXUS_EXPERIMENT-1886142&geoll=true&is_ortb=true&s_ip=104.254.151.0&s_city=los+angeles&commit_id=4d581d0a&ocurr=USD&omul=1.0 [TRUNCATED] Host: hblg.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3592849466404713000V10
2024-05-21 09:22:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Tue, 21 May 2024 09:22:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 21 May 2024 09:22:39 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-05-21 09:22:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.9	52339	185.184.8.90	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:39 UTC	756	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=tKDruMoLiO40zYZiM5xR_1716283315385; ts=1716283315
2024-05-21 09:22:40 UTC	397	IN	HTTP/1.1 302 Found date: Tue, 21 May 2024 09:22:40 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&pi=gumgum cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 21 May 2024 09:22:40 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
689	192.168.2.9	52340	54.164.74.54	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:40 UTC	611	OUT	GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:40 UTC	1341	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 21 May 2024 09:22:40 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175 Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCDgz7GyBjABOgT87-jmQgQ_i7TR.7Q45eeEP%2BRBqol%2BQV16cCOUKlq8gtWznBji%2BEPqpXx8; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCDgz7GyBjABOgT87-jmQgQ_i7TR.7Q45eeEP%2BRBqol%2BQV16cCOUKlq8gtWznBji%2BEPqpXx8; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 126 Connection: Close
2024-05-21 09:22:40 UTC	126	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 63 30 33 34 36 32 64 64 2d 38 64 35 37 2d 35 61 65 37 2d 36 64 63 39 2d 65 37 33 39 32 38 61 62 65 33 65 65 24 69 70 24 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port
690	192.168.2.9	52355	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:40 UTC	1455	OUT	GET /static-res/img/newsike/favicon-16x16.png?id=a43a5a3c7de4d329262b HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/article/top/926 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283348.0.0.0
2024-05-21 09:22:41 UTC	622	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:40 GMT Content-Type: image/png Content-Length: 988 Connection: close CF-Cache-Status: EXPIRED Last-Modified: Tue, 21 May 2024 07:17:17 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9I0TkAQ4vCWlGs80jaF062T%2B32O%2F7LOZMEkwZerF5JtKPOtigRRcB5hSbsmrHVpO4j7uYEvSqxi4pcJk%2BkeGPLeFcKF8CkdWWWDhsp2krpQm7TtNqgmUt3hIuOPN2WGFk9s98qc1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887380d98eaa0c8e-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:41 UTC	747	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 6f 50 4c 54 45 00 00 00 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 01 b9 2b 03 b9 2d 0c bc 34 7e db 94 6e d7 86 03 b9 2c 0c bb 33 8c df 9f f7 fd f8 7e db 93 0b bb 33 f5 fc f7 7d db 93 f6 fd f8 8f e0 a1 8f e0 a2 8b df 9e f9 fd fa 7d db 92 0d bc 34 ff ff ff 8b 5e ef 95 00 00 00 0f 74 52 4e 53 00 00 07 48 a7 e4 fb 18 92 ee b0 06 49 ed e3 fd 24 b3 f8 00 00 00 01 62 4b 47 44 24 b4 06 f9 Data Ascii: PNGIHDR(-SgAMAa cHRMz&u0`:pQ<oPLTE,,,,,,,,,,,,,,,+-4~n,3~3}}4^tRNSHI$bKGD$
2024-05-21 09:22:41 UTC	241	IN	Data Raw: 17 74 45 58 74 54 68 75 6d 62 3a 3a 49 6d 61 67 65 3a 3a 57 69 64 74 68 00 31 39 32 d3 ac 21 08 00 00 00 19 74 45 58 74 54 68 75 6d 62 3a 3a 4d 69 6d 65 74 79 70 65 00 69 6d 61 67 65 2f 70 6e 67 3f b2 56 4e 00 00 00 17 74 45 58 74 54 68 75 6d 62 3a 3a 4d 54 69 6d 65 00 31 36 38 38 34 30 34 31 36 37 3f 0a a7 e2 00 00 00 0f 74 45 58 74 54 68 75 6d 62 3a 3a 53 69 7a 65 00 30 42 42 94 a2 3e ec 00 00 00 56 74 45 58 74 54 68 75 6d 62 3a 3a 55 52 49 00 66 69 6c 65 3a 2f 2f 2f 6d 6e 74 6c 6f 67 2f 66 61 76 69 63 6f 6e 73 2f 32 30 32 33 2d 30 37 2d 30 33 2f 31 62 37 64 30 33 36 33 32 30 65 36 39 33 30 36 63 64 35 62 62 36 65 61 38 62 32 63 62 39 64 65 2e 69 63 6f 2e 70 6e 67 b5 73 9e 79 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: tEXtThumb::Image::Width192!tEXtThumb::Mimetypeimage/png?VNtEXtThumb::MTime1688404167?tEXtThumb::Size0BB>VtEXtThumb::URIfile:///mntlog/favicons/2023-07-03/1b7d036320e69306cd5bb6ea8b2cb9de.ico.pngsyIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.9	52336	124.146.153.162	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:40 UTC	696	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:41 UTC	829	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 21 May 2024 09:22:40 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=Zkxn4MCo8YsAANtkMB0AAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=Zkxn4MCo8YsAANtkMB0AAAAA; path=/; expires=Thu, 21-May-26 09:22:40 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 162 X-SO-HostName: a-ad40007.dc2p.scaleout.jp X-SO-LB-Hostname: m-tgng39.dc4p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"8.46.123.175","key":"Zkxn4MCo8YsAANtkMB0AAAAA","privacy_sensitive":false,"uid":"","upstream_id":"a-ad40007"} X-SO-Key: Zkxn4MCo8YsAANtkMB0AAAAA X-SO-IP: 8.46.123.175 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: a-ad40007

Session ID	Source IP	Source Port	Destination IP	Destination Port
692	192.168.2.9	52359	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:41 UTC	552	OUT	OPTIONS /adsid/integrator.json HTTP/1.1 Host: pubads.g.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-afma-token-requester-type Origin: https://custommapposter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:41 UTC	664	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: x-afma-token-requester-type Access-Control-Allow-Origin: https://custommapposter.com Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 21 May 2024 09:22:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.9	52381	192.132.33.68	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:41 UTC	764	OUT	GET /pixel/cookiesync?source=6b2595d5-cf4e-4298-a4ac-bcc34433eaad&secure=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GLOBALID=2uKlc8-sIBd984cSkDr2DtjNhbWejoTvoTrkUoVH5vN884WXTUx-0_-9-3tEPQygeGO73CAlsrMC4Q2
2024-05-21 09:22:41 UTC	664	IN	HTTP/1.1 302 Found Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://visitor.omnitagjs.com/visitor/sync?uid=6ca9493fd95af83951a8d0b213a77e8d&visitor=c04dba63-1752-44a6-a6da-a816ddd848b1&name=BIDTELLECT&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT} Set-Cookie: GLOBALID=2uKlc8-sIBd984cSkDr2DtjNhbWejoTvoTrkUoVH5vN884WXTUx-0_-9-3tEPQygeGO73CAlsrMC4Q2; domain=.bttrack.com; expires=Mon, 19-Aug-2024 09:21:42 GMT; path=/; secure; SameSite=None X-ServerName: Track004-iad Date: Tue, 21 May 2024 09:21:41 GMT Connection: close Content-Length: 315 Strict-Transport-Security: max-age=31536000;
2024-05-21 09:22:41 UTC	315	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 73 79 6e 63 3f 75 69 64 3d 36 63 61 39 34 39 33 66 64 39 35 61 66 38 33 39 35 31 61 38 64 30 62 32 31 33 61 37 37 65 38 64 26 61 6d 70 3b 76 69 73 69 74 6f 72 3d 63 30 34 64 62 61 36 33 2d 31 37 35 32 2d 34 34 61 36 2d 61 36 64 61 2d 61 38 31 36 64 64 64 38 34 38 62 31 26 61 6d 70 3b 6e 61 6d 65 3d 42 49 44 54 45 4c 4c 45 43 54 26 61 6d 70 3b 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 61 6d 70 3b 67 64 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://visitor.omnitagjs.com/visitor/sync?uid=6ca9493fd95af83951a8d0b213a77e8d&visitor=c04dba63-1752-44a6-a6da-a816ddd848b1&name=BIDTELLECT&gdpr=${GDPR}&gd

Session ID	Source IP	Source Port	Destination IP	Destination Port
694	192.168.2.9	52377	54.217.173.39	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:41 UTC	614	OUT	GET /cs?aid=11590&id=LWG6RD06-26-1UOC HTTP/1.1 Host: cs.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:41 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://eus.rubiconproject.com/ x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port
695	192.168.2.9	52397	67.202.105.23	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:41 UTC	692	OUT	GET /ps/?xi=1&xu=LWG6RD06-26-1UOC HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643
2024-05-21 09:22:41 UTC	672	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212615153490303%3As1%3D1716283305643%3Ats%3D1716283305643; Domain=.33across.com; Expires=Wed, 21-May-2025 09:22:41 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP001 location: https://events-ssc.33across.com/match?bidder_id=30&external_user_id=LWG6RD06-26-1UOC&ts=1716283361&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Tue, 21 May 2024 09:22:41 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
696	192.168.2.9	52463	35.227.252.103	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	704	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2870 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:42 UTC	2870	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 30 39 32 35 31 38 63 61 32 64 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 73 65 61 72 63 68 2d 61 72 74 69 63 6c 65 22 2c 22 72 65 66 22 3a 22 22 2c 22 6d 6f 62 69 6c 65 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 67 65 6f 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 6c 61 74 22 3a Data Ascii: {"imp":[{"site":{"id":"fdd82422-8575-448e-84fe-fa092518ca2d","domain":"custommapposter.com","page":"https://custommapposter.com/search-article","ref":"","mobile":0},"device":{"geo":{"ip":"8.46.123.175","city":"New York","region":"NY","country":"US","lat":
2024-05-21 09:22:42 UTC	441	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Tue, 21 May 2024 09:22:42 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:42 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 39 31 62 32 64 31 30 35 2d 62 39 39 34 2d 34 31 65 63 2d 39 66 32 64 2d 33 31 32 34 35 31 38 32 37 34 66 31 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"91b2d105-b994-41ec-9f2d-3124518274f1","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port
697	192.168.2.9	52418	159.223.124.226	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	1666	OUT	GET /api/cookie?partnerId=kueez-openx&gdpr=0&gdpr_consent=&us_privacy=&userId=f9d244fa-3bed-478a-8aa0-5616d2671cef HTTP/1.1 Host: sync.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.kueezrtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=FJ1138g9HsxArRM5IPQ0VJKQEMLxcgPhdzCxpRCy5GT3kTanVQKjUKUQp9EU54E2J%2BA3xyFEUPe0QZd0JifgQoMw5TC39HTHlENHUMeWEaSxt%2BQE8gRGN%2BDXpjCFAOfUtKckFjKAx%2FMQ5FFWpFS3YTZH1WL2RbU196EkkjRWQuAnwyDlEbZFFOckUzeA14aAkGWn5HSnZGZnUDL2NdAQpqX1p3QWUsA3g2DFZYK0VMc0VmeQ1%2FNgACWypRVGNEYX1TfWIKAwt%2FRRwjEDR6DX1lWwUAcBFabVBkfgYqZw4CD39HTnRDZXpUKmheA1txFkljXnB7Bn4xDlVbeEIZIkRmfwJ9ZABRX3FDTHZQfm8DejReAwt9QU11EGUsVytgCgEIfUBOdERwYRd%2FYw8DCXlHT3gRYXsHe2EPBFgrEkBxE2VvGWtmC1BYfRYecEYxeVN7MQkFDn4QT3RGNHsXZXIOVA4pRUt1FmYuAS9iWVZbf0UbdkRjKQ1rfBpRCn8STSdHZnxUKmYMVQ58R0B3FGp%2FBX9yFEUPe0QZdBQwLgZ6YA9QDHBBS3JDN3QDcWYaSxt%2BQE8gRGB1UHgxW1ENekRMdUpkKwx5ZApFZGRRGy4HPDkXc2AURV4sAwpjSClvXDoVbUUDLhIUMhd%2Bb1ItIEpFA2pDWm1QNSlFOxNXCUotHQxjSHBvGWslSzdLIQUZIgtwdxdrLRRFSi0ACygdPG8Pa2RbAQ19FxlzX2ApUC19CFddLF5OI0E3YFAtaQxWXStGQXlGZm8ZazNXCVctEAwoHTwEUWtqGlEMKkFJcEs3K1R%2FY1oEW3wST3EWZ3VXK3IURVA7Oh4zEz8oF3MkShJcNQ%3D%3D
2024-05-21 09:22:42 UTC	574	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; Domain=.kueezrtb.com; Path=/; Expires=Thu, 20 Jun 2024 09:22:42 GMT; Secure; SameSite=None content-type: image/avif content-length: 43 date: Tue, 21 May 2024 09:22:42 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
698	192.168.2.9	52410	34.120.63.153	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	698	OUT	POST /rtb/prebid?cid=8CUWWG7OK HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 2919 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; visitor-id=3592849466404713000V10
2024-05-21 09:22:42 UTC	2919	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 57 57 47 37 4f 4b 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e 22 3a 22 76 38 2e 34 36 2e 30 Data Ascii: {"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/","ref":"","topMostLocation":"https://custommapposter.com/","isTop":true,"canonical_url":"https://custommapposter.com/"},"ext":{"customer_id":"8CUWWG7OK","prebid_version":"v8.46.0
2024-05-21 09:22:42 UTC	781	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Tue, 21 May 2024 09:22:42 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://custommapposter.com content-type: application/json;charset=utf-8 date: Tue, 21 May 2024 09:22:41 GMT x-envoy-upstream-service-time: 19 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:42 UTC	288	IN	Data Raw: 31 31 34 0d 0a 7b 22 69 64 22 3a 22 35 64 30 35 65 31 62 33 2d 31 38 39 36 2d 34 35 66 38 2d 39 33 39 35 2d 35 63 36 30 64 35 37 31 61 63 64 33 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 57 57 47 37 4f 4b 26 70 72 76 69 64 3d 37 37 26 69 74 79 70 65 3d 50 52 45 42 49 44 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d 30 26 75 73 70 5f 73 Data Ascii: 114{"id":"5d05e1b3-1896-45f8-9395-5c60d571acd3","bidList":[],"ext":{"csUrl":[{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUWWG7OK&prvid=77&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_s

Session ID	Source IP	Source Port	Destination IP	Destination Port
699	192.168.2.9	52415	35.186.236.140	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	672	OUT	GET /mmt.gif?s=aff6c109-179f-4b44-ad2e-35a051fdd1ff&a=z.r&u=7f0f5ba8-ff98-4d6a-95d0-427b7a2e1377 HTTP/1.1 Host: imps.monu.delivery Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:42 UTC	760	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo8PUjZkiAXl7H4zoi-vWHfX-9nyTuWwndV86gy-mqoJRlE_pYvRTswbL9Ff_PG49pxmB6gMaee6Q x-goog-generation: 1499850799559224 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 37 x-goog-hash: crc32c=1zd0wQ== x-goog-hash: md5=RVAF4vS47MSEUA+rCGGfcA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 37 Server: UploadServer Date: Fri, 26 Apr 2024 03:41:44 GMT Expires: Sat, 26 Apr 2025 03:41:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Jul 2017 09:13:19 GMT ETag: "455005e2f4b8ecc484500fab08619f70" Content-Type: image/gif Age: 2180458 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-21 09:22:42 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 70 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89ap!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
700	192.168.2.9	52406	104.207.133.222	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	1622	OUT	POST /prebid/multi/65b2119efa63bcb4a70d58bb HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1830 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=FJ1138g9HsxArRM5IPQ0VJKQEMLxcgPhdzCxpRCy5GT3kTanVQKjUKUQp9EU54E2J%2BA3xyFEUPe0QZd0JifgQoMw5TC39HTHlENHUMeWEaSxt%2BQE8gRGN%2BDXpjCFAOfUtKckFjKAx%2FMQ5FFWpFS3YTZH1WL2RbU196EkkjRWQuAnwyDlEbZFFOckUzeA14aAkGWn5HSnZGZnUDL2NdAQpqX1p3QWUsA3g2DFZYK0VMc0VmeQ1%2FNgACWypRVGNEYX1TfWIKAwt%2FRRwjEDR6DX1lWwUAcBFabVBkfgYqZw4CD39HTnRDZXpUKmheA1txFkljXnB7Bn4xDlVbeEIZIkRmfwJ9ZABRX3FDTHZQfm8DejReAwt9QU11EGUsVytgCgEIfUBOdERwYRd%2FYw8DCXlHT3gRYXsHe2EPBFgrEkBxE2VvGWtmC1BYfRYecEYxeVN7MQkFDn4QT3RGNHsXZXIOVA4pRUt1FmYuAS9iWVZbf0UbdkRjKQ1rfBpRCn8STSdHZnxUKmYMVQ58R0B3FGp%2FBX9yFEUPe0QZdBQwLgZ6YA9QDHBBS3JDN3QDcWYaSxt%2BQE8gRGB1UHgxW1ENekRMdUpkKwx5ZApFZGRRGy4HPDkXc2AURV4sAwpjSClvXDoVbUUDLhIUMhd%2Bb1ItIEpFA2pDWm1QNSlFOxNXCUotHQxjSHBvGWslSzdLIQUZIgtwdxdrLRRFSi0ACygdPG8Pa2RbAQ19FxlzX2ApUC19CFddLF5OI0E3YFAtaQxWXStGQXlGZm8ZazNXCVctEAwoHTwEUWtqGlEMKkFJcEs3K1R%2FY1oEW3wST3EWZ3VXK3IURVA7Oh4zEz8oF3MkShJcNQ%3D%3D
2024-05-21 09:22:42 UTC	1830	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 36 32 38 33 33 36 30 34 39 30 2c 22 62 69 64 49 64 22 3a 22 32 39 34 39 63 63 39 33 31 65 64 38 64 34 33 35 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 6d 6d 74 2d 34 38 31 34 38 33 36 36 2d 62 38 62 34 2d 34 34 64 61 2d 38 65 37 65 2d 30 62 64 33 62 64 32 38 65 39 66 30 5f 32 5f 31 5f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 31 36 30 78 36 30 30 22 5d 2c 22 75 6e 69 71 75 65 44 65 61 6c 49 64 22 3a Data Ascii: {"url":"https%3A%2F%2Fcustommapposter.com%2F","uqs":"","cb":1716283360490,"bidId":"2949cc931ed8d435","referrer":null,"adUnitCode":"mmt-48148366-b8b4-44da-8e7e-0bd3bd28e9f0_2_1_ad","publisherId":"65lk7c192882r0011813fn9","sizes":["160x600"],"uniqueDealId":
2024-05-21 09:22:42 UTC	1479	IN	HTTP/1.1 200 OK access-control-allow-origin: https://custommapposter.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_e8c24d42=7LF15IJCsAK024InuRSxMmgzEjM%2FXldGOkxPCXFOen0iRXMpAANVKlhBYGRMfXJ1FXh7BAUWZUxDYDVNfnIiS3kuU1cGf11AMGVBKHpwRXRpHBACelkUZGNIensiEHd%2FAgUAfVZDNGtBeXthX2N9AwVQeV9BZWobenxxQXB8U1NXKFZFM2RaZWh1QHYqBgMHcV1GYmRPfHJxQHJ6VQsCKFhXfnFOen0iRXEoVgZXfQhHM2IafnwgRHQpBgQWZUxDYWQZfHJyS3AqUwQAe1lBZmtOL3kmFXJpHBACelkUZGIefXsiEHd%2FAgUAfVZDNGsdKyhhX2N9AwJSfVxHNmFPfy4hESd8CAYBKgxMajFaZWh1QHIoBwRRf1lBZGZJfn0iEHktVFANLF9XfnFOei4lF3N%2BAgcAK1kUMDFIeyxyRnJ9BQQWZUxDYWQZfC8lQnUoBFQGKF8XZWUbfn93FXdpHBACelkUZGBMLX4gRyd5UQNWflgWZWVJLXJhX2N9AwVVfAhAZmIZKnx3QXZ%2FBAoCL1ZHYmVaZWh1QHYqBVRWKl1GYmRPfHJxQHJ6VQsCcVhXfnFOen0iRXNzVQNVKlhBYGRMfXJ1FXh7BAAWFEJXMTwNJz5hSXFnElVQORxXaChaIDkGJmNxVlNYOgtZcDQcOThhSWN7Eh4WLgoFIBAXJzkmHTVpChAWZUwAIQMKIDwiEDhpChAWNEJXITYLOiMsHWNxEgZXL1pANjJKZHgnFiVmAAJQLUNDMGAdZC8nSnV6VFEBcFZBZnFUayksHS8uU0ZdJgA8NnFCa3x2EXN6AQtRLw9DYTEbK34iRHEvBQpWK0xZcDoLACwxEiwuEghAOxsQLw%3D%3D; Domain=.kueezrtb.com; Path=/; Expires=Tue, 21 May 2024 09:37:42 GMT; Secure; SameSite=None content-type: application/json; charset=utf-8 content-encoding: gzip content-length: 22349 date: Tue, 21 May 2024 09:22:42 GMT keep-alive: timeout=5 connection: close
2024-05-21 09:22:42 UTC	4108	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bc 09 77 e2 48 f6 27 fa 55 dc 3e 63 ca 9e 4c 3b b5 01 22 dd aa 3a a1 95 55 a0 15 44 bb 0f 47 1b 92 d0 6a 49 20 a0 32 fd d9 df 09 49 78 c9 ac ea ea ff bc 79 6f de cc eb ac 53 46 11 8a e5 c6 8d 7b 7f 77 89 80 df af 73 b7 d8 47 65 71 fd f5 1f bf 5f db 69 1a 06 2e 7c fe e7 e7 6b d3 b9 fe 7a fd f7 bf dd df 5f 31 b9 6b 96 c1 c1 bd 22 ba 08 42 e0 c4 a0 7f 55 b8 f9 c1 75 ae ac d3 d5 cc 8d 2d 37 bf 42 51 92 c4 ae 0e 81 79 05 b2 4c 74 8f fb e2 ea fe fe d7 bf 3b c1 e1 2a 70 a8 a7 eb 38 71 cb fb 43 e9 95 f7 78 bf 87 f7 06 ae 65 a1 f8 16 33 71 a7 47 f6 6c c4 26 4c ac 87 77 09 cc 24 9e ae 7f fd 7b 61 e7 41 56 b6 3d 45 86 79 ba be 8a cc c4 db 9b 9e 4b 3d 5d ef cc 83 d9 b4 78 ba fe 75 b3 b1 1c b3 34 a9 a7 eb c2 c1 6e 70 36 d9 47 d1 4b b0 Data Ascii: wH'U>cL;":UDGjI 2IxyoSF{wsGeq_i.\|kz_1k"BUu-7BQyLt;*p8qCxe3qGl&Lw${aAV=EyK=]xu4np6GK
2024-05-21 09:22:42 UTC	16320	IN	Data Raw: dd ea 06 07 22 b7 52 37 0b 79 ce 8f a6 6d ef a2 b0 59 f1 06 07 68 53 b4 0a 95 e3 6a 22 ec 32 8f de ea 60 05 d1 14 45 d7 61 c2 6d c4 ee b3 a6 61 bb 77 cd cb d1 a2 96 9d 0d 3b 7b 4f 0e 14 96 43 9d 7f 07 87 0a df 60 c4 4f ab bb c1 01 a3 ea 1b 66 2e 2a 9c ac 03 75 a4 5f e8 b3 51 2c fc 40 4e bc 8f ca e0 be b0 7f 9c ba a5 6b 19 94 3e f4 69 6e 70 60 46 d1 c6 8a c2 0d 92 94 4d 93 28 2d 8a 4d 92 96 c1 b6 9d f6 27 86 3f 67 05 0d f3 a4 00 f9 89 1f 59 bc 79 23 22 cb a3 68 93 bb cf 1f 3a 33 22 b7 e2 66 0b f5 8d b2 5a 8e 1c ab c1 23 28 61 4e fe 26 88 10 01 ec 83 47 21 08 8a 22 68 fd be bc c8 d1 6b 23 65 21 8f 04 0a 6b a0 e7 bd 26 42 64 82 b5 db b4 81 8a 56 ac df 09 ac b7 49 13 f7 55 81 df 54 f7 b5 a6 21 e9 43 14 09 67 64 5a 79 2f ce cd c8 02 03 33 83 f0 29 36 9f df 7b Data Ascii: "R7ymYhSj"2`Eamaw;{OC`Of.*u_Q,@Nk>inp`FM(-M'?gYy#"h:3"fZ#(aN&G!"hk#e!k&BdVIUT!CgdZy/3)6{
2024-05-21 09:22:42 UTC	1921	IN	Data Raw: f4 22 df 04 2d bc ca 86 d8 96 07 c4 76 93 e5 8d f7 14 81 83 88 bb c4 62 51 72 f2 fa 2d 59 34 8f ba 6c d2 06 c0 b9 ca fe b1 ea 1a b5 18 32 49 d4 2a 34 09 cb d1 ab 77 5a c0 bf 4a f3 f4 0e 51 1f eb 92 cc 9b 22 28 8d a9 50 8e 57 2b 92 16 f0 aa 89 73 e7 4b 0c bd 76 a1 73 d8 78 96 1e d3 a8 cd 44 b0 a6 b1 bb 04 b6 7f 14 87 29 09 e3 fc 08 38 45 77 1b 05 6d b8 6b be c8 b3 ba d4 be 17 01 01 b1 60 77 f4 48 a3 39 c9 2b 06 f5 dd 60 12 7c 56 bb f6 e4 fa 8a 86 6b e5 54 f1 61 20 95 bb 6c 5b f0 51 db 25 aa 2b b4 38 98 aa 93 d3 fd a6 61 f0 86 0a 70 10 51 ae 58 6e 77 35 a5 04 93 02 d9 e6 d2 f8 c1 a3 38 58 e1 f8 13 bc 76 27 f1 9a df 11 3b ed 4c 09 dc 2c 69 48 42 e4 cf 49 00 33 db eb 78 53 84 98 94 d3 51 bf 3a d8 15 1b 26 5f c0 d6 5a 86 23 bc 4e d4 06 85 51 81 21 45 a0 56 66 Data Ascii: "-vbQr-Y4l2I*4wZJQ"(PW+sKvsxD)8Ewmk`wH9+`\|VkTa l[Q%+8apQXnw58Xv';L,iHBI3xSQ:&_Z#NQ!EVf

Session ID	Source IP	Source Port	Destination IP	Destination Port
701	192.168.2.9	52417	185.64.190.79	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	2096	OUT	GET /AdServer/ImgSync?p=159706&pu=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DPUBMATIC%26ttl%3D720%26uid%3D2fe1084ffe44c28350116ec0a0a1c2d1%26visitor%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:42 UTC	1077	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://visitor.omnitagjs.com/visitor/sync?name=PUBMATIC&ttl=720&uid=2fe1084ffe44c28350116ec0a0a1c2d1&visitor=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=159706^https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DPUBMATIC%26ttl%3D720%26uid%3D2fe1084ffe44c28350116ec0a0a1c2d1%26visitor%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=159706:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=7; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 21 May 2024 09:22:41 GMT Content-Length: 210 Connection: close
2024-05-21 09:22:42 UTC	210	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 73 79 6e 63 3f 6e 61 6d 65 3d 50 55 42 4d 41 54 49 43 26 61 6d 70 3b 74 74 6c 3d 37 32 30 26 61 6d 70 3b 75 69 64 3d 32 66 65 31 30 38 34 66 66 65 34 34 63 32 38 33 35 30 31 31 36 65 63 30 61 30 61 31 63 32 64 31 26 61 6d 70 3b 76 69 73 69 74 6f 72 3d 39 43 36 34 43 41 32 31 2d 35 30 41 44 2d 34 34 44 31 2d 39 41 41 37 2d 34 46 32 42 41 34 36 44 31 37 31 42 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://visitor.omnitagjs.com/visitor/sync?name=PUBMATIC&ttl=720&uid=2fe1084ffe44c28350116ec0a0a1c2d1&visitor=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port
702	192.168.2.9	52409	185.255.84.151	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	924	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&PageReferrer=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1667 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:42 UTC	1667	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 36 36 36 61 37 30 66 39 62 62 63 62 64 37 63 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 30 64 31 65 34 61 38 34 2d 39 39 63 66 2d 34 32 39 39 2d 38 62 64 65 2d 64 32 31 61 37 33 39 32 35 30 36 65 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 Data Ascii: {"Version":"1.0","Bids":{"1666a70f9bbcbd7c":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"0d1e4a84-99cf-4299-8bde-d21a7392506e","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monu
2024-05-21 09:22:42 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:42 GMT content-length: 181 x-envoy-upstream-service-time: 162 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:42 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 65 30 39 66 35 64 32 38 32 33 63 62 31 39 62 37 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 65 30 39 66 35 64 32 38 32 33 63 62 31 39 62 37 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 31 36 36 36 61 37 30 66 39 62 62 63 62 64 37 63 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"e09f5d2823cb19b74bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"e09f5d2823cb19b74bfb0857db316efd","BidID":"1666a70f9bbcbd7c"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
703	192.168.2.9	52422	185.64.190.79	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	2154	OUT	GET /AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:42 UTC	1173	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dpubmatic%26uid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=158355:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=7; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 21 May 2024 09:22:42 GMT Content-Length: 246 Connection: close
2024-05-21 09:22:42 UTC	246	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 38 33 35 35 26 61 6d 70 3b 70 6d 63 3d 31 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 25 32 46 73 65 74 75 69 64 25 33 46 41 25 33 44 31 37 39 62 38 37 61 65 2d 39 66 32 66 2d 34 36 65 62 2d 38 32 63 34 2d 37 35 63 39 35 65 66 33 66 61 61 34 25 32 36 62 69 64 64 65 72 25 33 44 70 75 62 6d 61 74 69 63 25 32 36 75 69 64 25 33 44 39 43 36 34 43 41 32 31 2d 35 30 41 44 2d 34 34 44 31 2d 39 41 41 37 2d 34 46 32 42 41 34 36 44 31 37 31 42 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dpubmatic%26uid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port
704	192.168.2.9	52416	185.255.84.151	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	868	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2F&PageUrl=https%3A%2F%2Fcustommapposter.com%2F&PageReferrer=https%3A%2F%2Fcustommapposter.com%2F&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2F HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1655 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:42 UTC	1655	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 33 30 32 63 65 38 65 30 35 39 65 32 65 30 65 36 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 37 38 35 33 37 37 30 39 2d 35 65 61 37 2d 34 35 65 65 2d 62 35 35 35 2d 35 64 66 30 34 31 38 65 36 36 66 38 22 2c 22 57 69 64 74 68 22 3a 31 36 30 2c 22 48 65 69 67 68 74 22 3a 36 30 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 31 36 30 78 36 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f Data Ascii: {"Version":"1.0","Bids":{"302ce8e059e2e0e6":{"PlacementID":"210a38a5ef434f943203dcfa1a13deed","TransactionID":"78537709-5ea7-45ee-b555-5df0418e66f8","Width":160,"Height":600,"AvailableSizes":"160x600","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mo
2024-05-21 09:22:42 UTC	722	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:42 GMT content-length: 181 x-envoy-upstream-service-time: 8 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:42 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 63 34 36 30 62 38 61 65 32 39 37 34 35 32 64 31 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 33 32 30 33 64 63 66 61 31 61 31 33 64 65 65 64 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 63 34 36 30 62 38 61 65 32 39 37 34 35 32 64 31 32 31 30 61 33 38 61 35 65 66 34 33 34 66 39 34 22 2c 22 42 69 64 49 44 22 3a 22 33 30 32 63 65 38 65 30 35 39 65 32 65 30 65 36 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"c460b8ae297452d1210a38a5ef434f94","Placement":"210a38a5ef434f943203dcfa1a13deed","CreativeID":"c460b8ae297452d1210a38a5ef434f94","BidID":"302ce8e059e2e0e6"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
705	192.168.2.9	52413	54.171.119.95	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	621	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:42 UTC	1653	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 70 62 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 36 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 36 32 38 33 33 36 30 35 30 39 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 30 79 6a 71 33 76 73 66 34 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"pbjs","wrapper_version":"8.46.0","adapter_version":"6.0.0","auction_start":1716283360509,"publisher_id":"01g0yjq3vsf4","publisher_name":"custommapposter.com","site_domain":"custommapposter.com","dnt":
2024-05-21 09:22:42 UTC	496	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:42 GMT Content-Type: application/json Content-Length: 85 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://custommapposter.com x-reason: maxmind anonymous x-envoy-upstream-service-time: 5 server: istio-envoy
2024-05-21 09:22:42 UTC	85	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 33 31 35 38 33 64 62 64 36 64 38 33 66 66 37 65 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 34 37 37 34 65 33 65 35 62 32 33 31 30 30 30 30 31 30 31 62 33 64 64 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"31583dbd6d83ff7e","publisherId":"64774e3e5b2310000101b3dd"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
706	192.168.2.9	52596	35.186.253.211	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	413	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:42 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:22:42 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
707	192.168.2.9	52571	185.255.84.151	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	868	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fcustommapposter.com%2F&PageUrl=https%3A%2F%2Fcustommapposter.com%2F&PageReferrer=https%3A%2F%2Fcustommapposter.com%2F&CanonicalUrl=https%3A%2F%2Fcustommapposter.com%2F HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935
2024-05-21 09:22:42 UTC	1653	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 33 30 36 39 31 34 30 61 30 61 30 30 65 63 63 38 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 49 44 22 3a 22 63 36 39 61 61 66 36 35 2d 33 39 35 63 2d 34 61 63 30 2d 38 38 61 39 2d 34 38 37 65 30 65 63 63 65 62 37 62 22 2c 22 57 69 64 74 68 22 3a 37 32 38 2c 22 48 65 69 67 68 74 22 3a 39 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 37 32 38 78 39 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 6f 6e 75 Data Ascii: {"Version":"1.0","Bids":{"3069140a0a00ecc8":{"PlacementID":"4bfb0857db316efdf55b0fffe440635f","TransactionID":"c69aaf65-395c-4ac0-88a9-487e0ecceb7b","Width":728,"Height":90,"AvailableSizes":"728x90","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi":"monu
2024-05-21 09:22:42 UTC	724	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://custommapposter.com access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=46e59d222a7a2903202481b6faf17935; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Tue, 21 May 2024 09:22:42 GMT content-length: 181 x-envoy-upstream-service-time: 279 server: ayl-lb-fra02 connection: close
2024-05-21 09:22:42 UTC	181	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 31 33 64 61 33 38 66 37 34 33 36 32 32 31 34 36 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 66 35 35 62 30 66 66 66 65 34 34 30 36 33 35 66 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 31 33 64 61 33 38 66 37 34 33 36 32 32 31 34 36 34 62 66 62 30 38 35 37 64 62 33 31 36 65 66 64 22 2c 22 42 69 64 49 44 22 3a 22 33 30 36 39 31 34 30 61 30 61 30 30 65 63 63 38 22 7d 5d 0a Data Ascii: [{"Price":0,"Attempt":"13da38f7436221464bfb0857db316efd","Placement":"4bfb0857db316efdf55b0fffe440635f","CreativeID":"13da38f7436221464bfb0857db316efd","BidID":"3069140a0a00ecc8"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port
708	192.168.2.9	52461	18.194.121.192	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	637	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1695 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://custommapposter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:42 UTC	1695	OUT	Data Raw: 7b 22 69 64 22 3a 22 65 66 39 66 34 34 31 38 2d 62 39 32 38 2d 34 34 37 61 2d 38 65 61 38 2d 65 63 38 30 32 32 61 63 39 61 35 36 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 31 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 2f 73 65 61 72 63 68 2d 61 72 74 69 63 6c 65 22 2c 22 72 65 66 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 75 73 74 6f 6d 6d 61 70 70 6f 73 74 65 72 2e 63 6f 6d 22 7d 2c 22 69 64 22 3a 22 66 64 64 38 32 34 32 32 2d 38 35 37 35 2d 34 34 38 65 2d 38 34 66 65 2d 66 61 Data Ascii: {"id":"ef9f4418-b928-447a-8ea8-ec8022ac9a56","at":1,"cur":["USD"],"tmax":1100,"site":{"domain":"custommapposter.com","page":"https://custommapposter.com/search-article","ref":"","publisher":{"domain":"custommapposter.com"},"id":"fdd82422-8575-448e-84fe-fa

Session ID	Source IP	Source Port	Destination IP	Destination Port
709	192.168.2.9	52708	54.239.38.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	695	OUT	GET /s/ecm3?ex=gg.com&id=e_4dd50a11-a7ca-4904-8f5f-62232e479c5b HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AzPbQbes3UcFhc63nW1GPu8; ad-privacy=0
2024-05-21 09:22:43 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 21 May 2024 09:22:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 0XJB50HS8TAD38X4SN7T Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-21 09:22:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
710	192.168.2.9	52720	104.22.35.123	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:42 UTC	1878	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=b3c084dde49de842&pvi=f175e2ab628ce64b&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2Fsearch-article&furl=https%3A%2F%2Fcustommapposter.com%2Fsearch-article&sr=1280x1024&type=latest:br&_=1716283360360&bidder=kueezrtb&at=display&v=1 HTTP/1.1 Host: gtrack.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=FJ1138g9HsxArRM5IPQ0VJKQEMLxcgPhdzCxpRCy5GT3kTanVQKjUKUQp9EU54E2J%2BA3xyFEUPe0QZd0JifgQoMw5TC39HTHlENHUMeWEaSxt%2BQE8gRGN%2BDXpjCFAOfUtKckFjKAx%2FMQ5FFWpFS3YTZH1WL2RbU196EkkjRWQuAnwyDlEbZFFOckUzeA14aAkGWn5HSnZGZnUDL2NdAQpqX1p3QWUsA3g2DFZYK0VMc0VmeQ1%2FNgACWypRVGNEYX1TfWIKAwt%2FRRwjEDR6DX1lWwUAcBFabVBkfgYqZw4CD39HTnRDZXpUKmheA1txFkljXnB7Bn4xDlVbeEIZIkRmfwJ9ZABRX3FDTHZQfm8DejReAwt9QU11EGUsVytgCgEIfUBOdERwYRd%2FYw8DCXlHT3gRYXsHe2EPBFgrEkBxE2VvGWtmC1BYfRYecEYxeVN7MQkFDn4QT3RGNHsXZXIOVA4pRUt1FmYuAS9iWVZbf0UbdkRjKQ1rfBpRCn8STSdHZnxUKmYMVQ58R0B3FGp%2FBX9yFEUPe0QZdBQwLgZ6YA9QDHBBS3JDN3QDcWYaSxt%2BQE8gRGB1UHgxW1ENekRMdUpkKwx5ZApFZGRRGy4HPDkXc2AURV4sAwpjSClvXDoVbUUDLhIUMhd%2Bb1ItIEpFA2pDWm1QNSlFOxNXCUotHQxjSHBvGWslSzdLIQUZIgtwdxdrLRRFSi0ACygdPG8Pa2RbAQ19FxlzX2ApUC19CFddLF5OI0E3YFAtaQxWXStGQXlGZm8ZazNXCVctEAwoHTwEUWtqGlEMKkFJcEs3K1R%2FY1oEW3wST3EWZ3VXK3IURVA7Oh4zEz8oF3MkShJcNQ%3D%3D
2024-05-21 09:22:43 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:42 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 887380ea29a042f7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port
711	192.168.2.9	52714	52.29.4.131	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:43 UTC	620	OUT	GET /sync?ssp=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:43 UTC	634	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 21 May 2024 09:22:43 GMT Location: https://rtb.mfadsrvr.com/ul_cb/sync?ssp=adyoulike&gdpr=0&gdpr_consent= Set-Cookie: tuuid=be479b4e-3fcf-4c59-b0c1-325d26fa6ab9; path=/; expires=Wed, 21-May-2025 09:22:43 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1716283363; path=/; expires=Wed, 21-May-2025 09:22:43 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1716283363; path=/; expires=Wed, 21-May-2025 09:22:43 GMT; domain=.mfadsrvr.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
712	192.168.2.9	52722	3.232.240.250	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:43 UTC	735	OUT	GET /pubsync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Flive.primis.tech%2Flive%2FliveCS.php%3Fsource%3Dexternal%26advId%3D126%26advUuid%3D%5Btvid%5D HTTP/1.1 Host: mb9eo.publishers.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:43 UTC	489	IN	HTTP/1.1 302 Date: Tue, 21 May 2024 09:22:43 GMT Content-Length: 0 Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=4f8ecc8e64c4409cbe038d97afeb337e; Domain=.tremorhub.com; Expires=Wed, 21-May-2025 15:11:03 GMT; Path=/; Secure; SameSite=None Location: pubsync/verify?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Flive.primis.tech%2Flive%2FliveCS.php%3Fsource%3Dexternal%26advId%3D126%26advUuid%3D%5Btvid%5D

Session ID	Source IP	Source Port	Destination IP	Destination Port
713	192.168.2.9	52740	35.186.253.211	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:43 UTC	413	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:43 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:22:43 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
714	192.168.2.9	52743	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:43 UTC	1498	OUT	GET /static-res/img/newsike/favicon-32x32.png?id=39a6afc44c6afe88283c HTTP/1.1 Host: custommapposter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/search-article Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1430325693.1716283288; growme_version={"name":"7.254.0","version":"7.254.0"}; pbjs-unifiedid=%7B%22TDID%22%3A%22d7c589fa-248b-42e0-8bc4-ffb4bdc33d5c%22%2C%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222024-05-21T09%3A21%3A31%22%7D; pbjs-unifiedid_cst=zix7LPQsHA%3D%3D; __gads=ID=5706e9f287f5cbb0:T=1716283300:RT=1716283300:S=ALNI_MYpC9ZX1Hrl2GVrMGZJB4H_b8adcQ; __gpi=UID=00000e2670b2592b:T=1716283300:RT=1716283300:S=ALNI_MZn9l3oL_0zfruEnJn5KFPwwJj8mA; __eoi=ID=5cfe142b98f72554:T=1716283300:RT=1716283300:S=AA-AfjYgSEVDVFMN-TVHSqdxXFSC; _li_dcdm_c=.custommapposter.com; _lc2_fpi=15efe6ffc406--01hyd7acptahsywd92p39kvw1k; _lc2_fpi_meta={%22w%22:1716283323099}; session=aff6c109-179f-4b44-ad2e-35a051fdd1ff; _ga_54725HQVMF=GS1.1.1716283287.1.1.1716283348.0.0.0; _pbjs_userid_consent_data=3524755945110770
2024-05-21 09:22:43 UTC	629	IN	HTTP/1.1 200 OK Date: Tue, 21 May 2024 09:22:43 GMT Content-Type: image/png Content-Length: 1458 Connection: close CF-Cache-Status: HIT Age: 128 Last-Modified: Tue, 21 May 2024 09:20:35 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=anuBtjbf4bnHB3gnqkkBZWP9o5zxp6ZtbCueuQDGC8cK06znLUWCOCKFJI6HoenkhIw02kFfb%2FNr9Wtb3wdKtn5bvBsStq9pqeaEOcx%2FBe0WOET0zIZlJiFWx%2FLx0yrgdNStQ2Ps"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887380ef7d3c18c8-EWR alt-svc: h3=":443"; ma=86400
2024-05-21 09:22:43 UTC	740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 2f 50 4c 54 45 00 00 00 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 b9 2c 02 Data Ascii: PNGIHDR DgAMAa cHRMz&u0`:pQ</PLTE,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
2024-05-21 09:22:43 UTC	718	IN	Data Raw: 44 9c 0a 1f 0a 18 7c 7e 19 b8 22 b8 27 4b 7c cb bd 6e ff c7 c0 89 1b 3c d3 cd 0f e4 de 70 68 e0 c4 03 5e a2 37 8c 5c 39 a6 4f d4 19 5d 23 2f 96 a0 5c d1 5d d1 ef 5f 93 e1 a4 52 86 cc b6 ee 27 51 5a 67 af 75 47 02 dc dd b3 ff dd 91 7d 65 1e a4 a8 bd 50 95 46 23 15 3b b0 e3 87 b5 f1 4c 62 f6 c8 9a 1f 9f 4c c6 3a 99 b0 e2 a7 67 b3 62 64 53 e7 26 7e 71 a9 af 56 fa ca 70 96 48 b5 86 4c 3b b9 b8 30 2b 6f 31 e8 bd b6 e8 37 9f 2f a8 f5 bf 29 e9 ea ff 0f f5 04 d8 5a 66 de 5a 33 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 32 33 2d 30 37 2d 30 33 54 31 37 3a 30 39 3a 32 37 2b 30 30 3a 30 30 cd f9 01 1c 00 00 00 25 74 45 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 32 30 32 33 2d 30 37 2d 30 33 54 31 37 3a 30 39 3a 32 37 2b 30 30 3a 30 30 bc a4 b9 Data Ascii: D\|~"'K\|n<ph^7\9O]#/\]_R'QZguG}ePF#;LbL:gbdS&~qVpHL;0+o17/)ZfZ3%tEXtdate:create2023-07-03T17:09:27+00:00%tEXtdate:modify2023-07-03T17:09:27+00:00

Session ID	Source IP	Source Port	Destination IP	Destination Port
715	192.168.2.9	52745	3.232.240.250	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:43 UTC	789	OUT	GET /pubsync/verify?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Flive.primis.tech%2Flive%2FliveCS.php%3Fsource%3Dexternal%26advId%3D126%26advUuid%3D%5Btvid%5D HTTP/1.1 Host: mb9eo.publishers.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=4f8ecc8e64c4409cbe038d97afeb337e
2024-05-21 09:22:43 UTC	573	IN	HTTP/1.1 302 Date: Tue, 21 May 2024 09:22:43 GMT Content-Length: 0 Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=4f8ecc8e64c4409cbe038d97afeb337e; Domain=.tremorhub.com; Expires=Wed, 21-May-2025 15:11:03 GMT; Path=/; Secure; SameSite=None Set-Cookie: tvssa=1716283363882; Domain=.tremorhub.com; Expires=Sun, 26-May-2024 09:22:43 GMT; Path=/; Secure; SameSite=None Location: https://live.primis.tech/live/liveCS.php?source=external&advId=126&advUuid=4f8ecc8e64c4409cbe038d97afeb337e

Session ID	Source IP	Source Port	Destination IP	Destination Port
716	192.168.2.9	52747	35.186.253.211	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:44 UTC	413	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=03002bf5-65fa-4f67-967c-1ad1ed7d0ea0\|1716283321
2024-05-21 09:22:44 UTC	175	IN	HTTP/1.1 404 Not Found Date: Tue, 21 May 2024 09:22:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
717	192.168.2.9	52746	3.160.150.30	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:44 UTC	759	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=259151345&3rdpcid=929149604929207739274 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQCDate=1716283323002; intentIQ=gWECw0EtsD
2024-05-21 09:22:44 UTC	1335	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 21 May 2024 09:22:44 GMT Set-Cookie: intentIQ=gWECw0EtsD; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:44 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:44 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:44 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVRE9vNWdx; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:44 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=137264047#1716283364670#0#1716283364670; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:44 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQMID=137264047#1716283364676; Domain=.intentiq.com; Expires=Thu, 20 Jun 2024 09:22:44 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 cce339e34372cea758a4181fcf4e7c14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4DO3k-rjpLPicFI7J-MajZiyQEO-XOAptu6cMba7k54bMNPDlUipsA==
2024-05-21 09:22:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
718	192.168.2.9	52749	34.96.105.8	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:44 UTC	601	OUT	GET /v1/api/sync/rubicon HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-21 09:22:44 UTC	277	IN	HTTP/1.1 204 No Content Set-Cookie: b=664C67E4F3E862E664EC7F14BLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Tue, 21 May 2024 09:22:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
719	192.168.2.9	52769	185.64.190.81	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:44 UTC	2305	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D179b87ae-9f2f-46eb-82c4-75c95ef3faa4%26bidder%3Dpubmatic%26uid%3D9C64CA21-50AD-44D1-9AA7-4F2BA46D171B HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B; KRTBCOOKIE_57=22776-6403784576581203868&KRTB&23339-6403784576581203868; KRTBCOOKIE_153=19420-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU&KRTB&23462-n_N2CJ_yIwmE8yBcyKNvWZr2cFKE_HENkKNZrxvU; KRTBCOOKIE_1323=23480-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23485-OPU0580edc5dbac4778bfc19398f495dfb8&KRTB&23575-OPU0580edc5dbac4778bfc19398f495dfb8; KRTBCOOKIE_18=22947-5140084931246551630; DPSync3=1717459200%3A219_197_227_201_245_241_226; SyncRTB3=1717545600%3A35%7C1716854400%3A223_2_15%7C1717459200%3A88_249_254_21_54_233_46_266_56_264_165_166_238_214_243_234_81_22_161_251_8_220_3_99_55_176_71_13%7C1717113600%3A63%7C1721433600%3A69%7C1718841600%3A203; KRTBCOOKIE_80=22987-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23025-CAESEOzOrh4jAZUZXA6KnB8RbgI&KRTB&23386-CAESEOzOrh4jAZUZXA6KnB8RbgI; KRTBCOOKIE_632=23041-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23047-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23234-KpbBdPglpn5lhGao2Y80jIXsk0zZnOQ4-Za8YTog2ZY&KRTB&23361-Kpb [TRUNCATED]
2024-05-21 09:22:44 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 21 May 2024 09:22:43 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716283363; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 20-Jun-2024 09:22:43 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=179b87ae-9f2f-46eb-82c4-75c95ef3faa4&bidder=pubmatic&uid=9C64CA21-50AD-44D1-9AA7-4F2BA46D171B P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-21 09:22:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
720	192.168.2.9	52776	172.67.21.232	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:44 UTC	1830	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=1b9c67cc35f64c79&pvi=be5a6906d54d988&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2F&furl=https%3A%2F%2Fcustommapposter.com%2F&sr=1280x1024&type=latest:br&_=1716283359489&bidder=kueezrtb&at=display&v=1 HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=VSe11LGWpAVQPofrN2UnETMiPzUdFVB2HHVGczBkZ1cHSnQiNBVzYGJlDVBLLXdkRnR0fXJZVUUtcWdAcmcwM1lSQHtzY0h3MGlpX1dQYGVhQ3Y3Z2FcXkF%2Fd2BHdG5jY1xXF3VxNkZjenNmXFETenc0FnU1ZTZdB0MucGETdmMzZllEXm5xZEcgY2lhV1cTL3FjQnZiZWhZAEEpIWRSbXRnY1gHRH0hY0EgNWdkXVFGeH9hFnkzMzJNSlB6dGcWdWRjNF1RRCglNRZ2bmVlDARLdCV1XGNgYmMMUUQpcWBEd2NgZ1gHEXQhMxJ4M2ByQ0REf3A2RnM0YWEOBUR4dWBEdW5nNlZWRntle1J3ZTU2C1RHfnJjEnY3MzJfVBR9cmRGdGBzfE1QQXsjZ0F1YWgzXFBAfnZgEyA1MGhfB0Vua3VGcmEwZQoAQ3gkYxZzN2AyWFARe3JjFnd0fXJZVUUtcWREJWIyZAlUE30lYEYiYWdhC15QYGVhQ3Y3ZDZaUkMtJGFEc2FlZFdQFHR1Z0ZjenNmXFETeSE1E3JlYWdYU0p%2BdGRBJG9naFlEXm5xZEcgYGNoClcTL3FjQnZiZWhZAEt8c2VSHHpzMwATHDhlbUBtdDY0HxRQdjx1GTITBHJVABMgNDJcYzE1IB1ESG53dVxjMTUgHSUdIjQyHjV0a3JNSlA5NAcCKCAwMxZESG5lKlxjJTQjHA8dImVtUnU1N2RaAhN%2BamUUJDJ8YF8CFmFxNUMkezQ0VlJDKCRiSXliZXJDRBEjKTkVIiI4PwEvFm59dUZ0NGNhXl8XKiZhQyM1M2QOUUIocm8SI3R9cgYVOyo1Nh0kdGskHRMXMQ%3D%3D
2024-05-21 09:22:45 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:44 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 887380f6efdc42b2-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.9	52771	3.160.150.30	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:44 UTC	770	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=584182936&3rdpcid=4f8ecc8e64c4409cbe038d97afeb337e HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQCDate=1716283323002; intentIQ=gWECw0EtsD
2024-05-21 09:22:45 UTC	1335	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 21 May 2024 09:22:45 GMT Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVRE9vNXBp; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:45 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: intentIQ=gWECw0EtsD; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:45 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:45 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=137264047#1716283365225#0#1716283365225; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:45 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQMID=137264047#1716283365226; Domain=.intentiq.com; Expires=Thu, 20 Jun 2024 09:22:45 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Thu, 21 May 2026 09:22:45 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 69114e4ea0aa4e532a5be63a75c51e2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1HijPcFUxf2fhAL0gVmZbdla1D26IRDIBSTCWPyt0-D3SxwYpIczmA==
2024-05-21 09:22:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
722	192.168.2.9	52819	172.67.21.232	443

Timestamp	Bytes transferred	Direction	Data
2024-05-21 09:22:45 UTC	1830	OUT	GET /dye?ac=2&acm=G3L&uid=1b532584ca23bf9&sid=1b9c67cc35f64c79&pvi=be5a6906d54d988&h=custommapposter.com&wh=1263x907&b=Chrome&bv=117.0.0.0&dev=&os=Windows%2010&p=&cc=US&uri=%2F&furl=https%3A%2F%2Fcustommapposter.com%2F&sr=1280x1024&type=latest:br&_=1716283359540&bidder=kueezrtb&at=display&v=1 HTTP/1.1 Host: track.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://custommapposter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=00009ace-bf27-e0a0-87c3-250eeac54701; kuid=2013b6fe90781036; vdzj1_e8c24d42=VSe11LGWpAVQPofrN2UnETMiPzUdFVB2HHVGczBkZ1cHSnQiNBVzYGJlDVBLLXdkRnR0fXJZVUUtcWdAcmcwM1lSQHtzY0h3MGlpX1dQYGVhQ3Y3Z2FcXkF%2Fd2BHdG5jY1xXF3VxNkZjenNmXFETenc0FnU1ZTZdB0MucGETdmMzZllEXm5xZEcgY2lhV1cTL3FjQnZiZWhZAEEpIWRSbXRnY1gHRH0hY0EgNWdkXVFGeH9hFnkzMzJNSlB6dGcWdWRjNF1RRCglNRZ2bmVlDARLdCV1XGNgYmMMUUQpcWBEd2NgZ1gHEXQhMxJ4M2ByQ0REf3A2RnM0YWEOBUR4dWBEdW5nNlZWRntle1J3ZTU2C1RHfnJjEnY3MzJfVBR9cmRGdGBzfE1QQXsjZ0F1YWgzXFBAfnZgEyA1MGhfB0Vua3VGcmEwZQoAQ3gkYxZzN2AyWFARe3JjFnd0fXJZVUUtcWREJWIyZAlUE30lYEYiYWdhC15QYGVhQ3Y3ZDZaUkMtJGFEc2FlZFdQFHR1Z0ZjenNmXFETeSE1E3JlYWdYU0p%2BdGRBJG9naFlEXm5xZEcgYGNoClcTL3FjQnZiZWhZAEt8c2VSHHpzMwATHDhlbUBtdDY0HxRQdjx1GTITBHJVABMgNDJcYzE1IB1ESG53dVxjMTUgHSUdIjQyHjV0a3JNSlA5NAcCKCAwMxZESG5lKlxjJTQjHA8dImVtUnU1N2RaAhN%2BamUUJDJ8YF8CFmFxNUMkezQ0VlJDKCRiSXliZXJDRBEjKTkVIiI4PwEvFm59dUZ0NGNhXl8XKiZhQyM1M2QOUUIocm8SI3R9cgYVOyo1Nh0kdGskHRMXMQ%3D%3D
2024-05-21 09:22:45 UTC	159	IN	HTTP/1.1 204 No Content Date: Tue, 21 May 2024 09:22:45 GMT Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 887380f99e0442b8-EWR

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1364, Parent PID: 5524

General

Target ID:	0
Start time:	05:21:04
Start date:	21/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6856, Parent PID: 1364

General

Target ID:	2
Start time:	05:21:07
Start date:	21/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=1564,i,17994336064599904773,4391651044741737396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6204, Parent PID: 5524

General

Target ID:	3
Start time:	05:21:09
Start date:	21/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://jaz.wxk.mybluehost.me/ch/104c5"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly